Western Digital has identified a security vulnerability in the Replay Protected Memory…
Key facts
- Attack vector
- Physical
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-294.
Summary
Western Digital has identified a security vulnerability in the Replay Protected Memory Block (RPMB) protocol as specified in multiple standards for storage device interfaces, including all versions of eMMC, UFS, and NVMe. The RPMB protocol is specified by industry standards bodies and is implemented by storage devices from multiple vendors to assist host systems in securing trusted firmware. Several scenarios have been identified in which the RPMB state may be affected by an attacker without the knowledge of the trusted component that uses the RPMB feature.
Why it matters now
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 7
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:westerndigital:inand_cl_em132_firmware:*:*:*:*:*:*:*:* | up to 2020-06-03 | Vulnerable | Westerndigital |
| cpe:2.3:h:westerndigital:inand_cl_em132:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Westerndigital |
| cpe:2.3:o:westerndigital:inand_ix_em132_firmware:*:*:*:*:*:*:*:* | up to 2020-06-03 | Vulnerable | Westerndigital |
| cpe:2.3:h:westerndigital:inand_ix_em132:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Westerndigital |
| cpe:2.3:o:westerndigital:inand_ix_em132_xi_firmware:*:*:*:*:*:*:*:* | up to 2020-06-03 | Vulnerable | Westerndigital |
| cpe:2.3:h:westerndigital:inand_ix_em132_xi:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Westerndigital |
| cpe:2.3:o:trustedfirmware:op-tee:*:*:*:*:*:*:*:* | up to 3.11.0 | Vulnerable | OP-TEE |
- cpe:2.3:o:westerndigital:inand_cl_em132_firmware:*:*:*:*:*:*:*:* Versions up to 2020-06-03 Vulnerable ·Westerndigital
- cpe:2.3:h:westerndigital:inand_cl_em132:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Westerndigital
- cpe:2.3:o:westerndigital:inand_ix_em132_firmware:*:*:*:*:*:*:*:* Versions up to 2020-06-03 Vulnerable ·Westerndigital
- cpe:2.3:h:westerndigital:inand_ix_em132:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Westerndigital
- cpe:2.3:o:westerndigital:inand_ix_em132_xi_firmware:*:*:*:*:*:*:*:* Versions up to 2020-06-03 Vulnerable ·Westerndigital
- cpe:2.3:h:westerndigital:inand_ix_em132_xi:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Westerndigital
- cpe:2.3:o:trustedfirmware:op-tee:*:*:*:*:*:*:*:* Versions up to 3.11.0 Vulnerable ·OP-TEE
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2020-13799
- 2026-10-03 Alias added: GHSA-w82c-75f7-qr29
References
Sources
- CVE-2020-13799 · CVE Program
- CVE-2020-13799 · NVD
- FIRST EPSS
- GHSA-w82c-75f7-qr29 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences