CVE-2007-2023

Published Apr 13, 2007 CVSS 2.0 · 7.2 High EPSS < 1% KEV · Not listed
Description
USB20.dll in Secustick USB flash drive decouples the authorization and file access routines, which allows local users to bypass authentication requirements by altering the return value of the VerifyPassWord function.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2007-2018 USB20.dll in Secustick USB flash drive decouples the authorization and file access routines, which allows local users to bypass authentication requirements by altering the return value of the VerifyPassWord function.
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 7, 2024, 1:13 PM
Reserved
Apr 13, 2007, 12:00 AM
Status
Modified
Published
Apr 13, 2007, 6:19 PM
Modified
Jun 16, 2026, 10:38 PM