CVE:CVE-2018-12037
CNNVD:CNNVD-201811-169
Micron Crucial MX100、MX200和MX300都是美国镁光（Micron）公司的银盘驱动器。Samsung T3等都是韩国三星（Samsung）公司的硬盘驱动器。
自加密磁盘（SED）技术中的ATA Security或TCG Opal Standards的实现过程存在安全漏洞，该漏洞源于用户密码和用于加密用户数据的密钥未做密码绑定。物理位置接近的攻击者可利用该漏洞获取密钥，进而解密信息。以下产品和版本受到影响：Micron Crucial MX100驱动，MX200驱动，MX300驱动；Samsung T3便携式驱动，T5便携式驱动；Samsung 840 EVO驱动，850 EVO驱动。
solution:Upgrade samsung 840_evo_firmware to a higher version than -; Upgrade samsung 850_evo_firmware to a higher version than -; Upgrade samsung t3_firmware to a higher version than -; Upgrade samsung t5_firmware to a higher version than -; Upgrade micron crucial_mx100_firmware to a higher version than -; Upgrade micron crucial_mx200_firmware to a higher version than -; Upgrade micron crucial_mx300_firmware to a higher version than -