CVE-2010-0224

CVE-2010-0224 describes a vulnerability in SanDisk Cruzer Enterprise USB flash drives where password validation occurs on the host computer rather than the device hardware. This design flaw allows a physically proximate attacker to bypass security and access the drive's cleartext contents by using a modified program. The vulnerability has a CVSS score of 4.6, indicating a low severity, as it requires local access and user interaction to exploit, potentially leading to partial confidentiality, integrity, and availability impacts. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.