Headline

CVE-2021-46390: Lexar® JumpDrive® Fingerprint F35 USB 3.0 Flash Drive

An access control issue in the authentication module of Lexar_F35 v1.0.34 allows attackers to access sensitive data and cause a Denial of Service (DoS). An attacker without access to securely protected data on a secure USB flash drive can bypass user authentication without having any information related to the password of the registered user. The secure USB flash drive transmits the password entered by the user to the authentication module in the drive after the user registers a password, and then the input password is compared with the registered password stored in the authentication module. Subsequently, the module returns the comparison result for the authentication decision. Therefore, an attacker can bypass password authentication by analyzing the functions that return the password verification or comparison results and manipulate the authentication result values. Accordingly, even if attackers enter an incorrect password, they can be authenticated as a legitimate user and can therefore exploit functions of the secure USB flash drive by manipulating the authentication result values.

2 years ago

CVE

Open in Source

#mac #windows #linux #dos #git

Lexar® JumpDrive® Fingerprint F35 USB 3.0 Flash Drive

$10,000.00

256GB128GB64GB32GB

up to 300MB/s read

up to 150MB/s read

10 Fingerprint IDs

Ultra Fast Access

Easy Set-Up

256-bit AES Encryption

Features

Security at the tip of your finger

Get an extra layer of security for your highly confidential documents using fingerprint authentication with the Lexar JumpDrive F35 USB 3.0 flash drive. The JumpDrive F35 protects your data against unauthorized access attempts and can save up to 10 fingerprint IDs, making sure only you and your closest collaborators have access to your files.

10 fingerprint ID’s

With so many people contributing to the important work you do, the last thing you want is for your highly sensitive information to fall into the wrong hands. This drive combines an integration of secure data storage and biometric technology to prevent unauthorized access. Select up to 10 people, and each unique fingerprint will be saved for access to the secure partition of the drive.

Ultra Fast Access

Place your finger on the drive, and when you see the light flash, you’re ready to continue powering through your day.

Easy Set-Up

Time travels at the speed of business, and with so much to do, in so little time, the setup for this drive is a breeze. Simply plug in your drive and use the application to set up passwords, enroll fingerprints and manage users2.

Securely protect your files

As if the use of your fingerprint to access your drive wasn’t already secure enough, this drive comes with 256-bit AES encryption to protect your critical files.

Rigorously tested

All Lexar product designs undergo extensive testing in the Lexar Quality Labs,facilities with more than 1,100 digital devices, to ensure performance, quality, compatibility, and reliability.

Specification

Interface

USB 3.0

Speed

32GB –– up to 150MB/s read1
64GB –– up to 150MB/s read1
128GB–– up to 150MB/s read1
256GB–– up to 300MB/s read1

Operating Temperature

0° to 70° C

Storage Temperature

-25° to 85° C

Dimension (L x W x H)

20.50mm x 64.38mm x 7.80mm / 0.807” x 2.534” x 0.307”

Weight

22.5 g / 0.05 lbs (USB Only)

System Supported

Mac®, Windows XP®, Windows® Vista, Windows 7, 8, 10, Linux2

Warranty

3 year limited warranty

Function

Fingerprint technology

1 Up to 300MB/s read transfer, write speeds lower. Speeds based on internal testing. Actual performance may vary.
2Fingerprint registration software only compatible with Windows XP, Vista, 7, 8, 10. Software required to create/edit accounts and adjust partition size. Regular flash drive use compatible with Windows, Linux and macOS.
Security safeguards, by their nature, are capable of circumvention. Lexar does not guarantee data will be 100% secure from unauthorized access, alteration, or destruction.
Some of the listed storage capacity is used for formatting and other purposes and is not available for data storage. 1GB equals 1 billion bytes.
The latest USB driver is recommended for best performance. Contact your device manufacturer to ensure compatibility before installing.
Product appearance, performance, software offerings, and packaging may vary depending on ship date and available inventory.
Lexar is not liable for any loss of data or images.

Product Numbers

North America

Capacity

#Part

256GB

LJDF35-256BNA

128GB

LJDF35-128BNL

64GB

LJDF35-64GBNL

32GB

LJDF35-32GBNL