CVE-2021-28653

6.5 mediumEPSS 0.9%

Medium (6.5) in westerndigital armorlock. EPSS 0.9% chance of exploitation in the next 30 days.

The iOS and macOS apps before 1.4.1 for the Western Digital G-Technology ArmorLock NVMe SSD store keys insecurely. They choose a non-preferred storage mechanism if the device has Secure Enclave support but lacks biometric authentication hardware.

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.9% chance of exploitation in the next 30 days; higher than 60% of CVEs (scores of 2026-10-31)
CWE: CWE-922
Published: 2021-03-19
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

westerndigital:armorlock

References

https://www.westerndigital.com/support/productsecurity/wdc-21003-armorLock-insecure-key-storage-vulnerability
https://www.westerndigital.com/support/productsecurity/wdc-21003-armorLock-insecure-key-storage-vulnerability

Check your stack JSON