VulnSocial

CVE-2022-28384PoC(verbatim / keypad_secure_usb_3.2_gen_1)

LOWCVSS 5.5 · MEDIUM

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

  • Hunt for exploitation attempts and persistence artifacts
  • Increase monitoring for publicly documented tradecraft
  • Track advisory updates for patch or workaround availability

Recommended action window: High priority (within 72h)

NVD description

An issue was discovered in certain Verbatim drives through 2022-03-31. Due to an insecure design, they allow an offline brute-force attack for determining the correct passcode, and thus gaining unauthorized access to the stored encrypted data. This affects Keypad Secure USB 3.2 Gen 1 Drive Part Number #49428 and Store 'n' Go Secure Portable HDD GD25LK01-3637-C VER4.0.

verbatim CVEsBack to dashboard
2.0/ 10 priority

Sources & remediation

Exploit / PoC references
Vendor / third-party advisories
Weakness type (CWE)
CWE-307

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • keypad_secure_usb_3.2_gen_1
  • keypad_secure_usb_3.2_gen_1_firmware
  • store_\'n\'_go_secure_portable_hdd
  • store_\'n\'_go_secure_portable_hdd_firmware

Threat summary

  • Public PoC is present in monitored signal
  • 1 mentions across 1 observed day

What's happening

  • PoC mentioned or linked in 1 signal
  • Technical details provided in 1 signal
  • 1 total mentions across 1 day

Affected systems

Vendors
verbatim
Products
keypad_secure_usb_3.2_gen_1keypad_secure_usb_3.2_gen_1_firmwarestore_\'n\'_go_secure_portable_hddstore_\'n\'_go_secure_portable_hdd_firmware

1 version affected across 4 products

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-03-11: 1PoC Mentioned / Linked · 2026-03-11: 1Technical Details · 2026-03-11: 103-11
Signal classification1 categories
PoC
1100.0%
Full discourse1 post
  • Cristella@Cristel05873848
    PoC

    @RealRoesener @NZZ Verwundbarkeiten mit dem Sicherheitslayer sind schon länger bekannt. Siehe YouTube, suche nach CVE-2022-28384. Mit dem Passcode kann der Attacker ein neues Password setzen (Art von Ransomware). Ein anderer Hersteller hat letztes Jahr den Sicherheitslayer überarbeitet,

    Post summary

    The tweet references CVE-2022-28384, indicating a PoC is available on YouTube and explains the vulnerability allows an adversary to set a new password in a ransomware-like manner.

    0000045
    159 followersView on X
CPE platform detail4 entries

4 of 4 entries

PartVendorProductVersionTarget SWTarget HW
HWverbatimkeypad_secure_usb_3.2_gen_1---
OSverbatimkeypad_secure_usb_3.2_gen_1_firmware---
HWverbatimstore_\'n\'_go_secure_portable_hdd---
OSverbatimstore_\'n\'_go_secure_portable_hdd_firmware---

Explore more

Back to dashboardverbatim CVEskeypad_secure_usb_3.2_gen_1 vulnerabilities