CVE-2015-7268

Samsung 850 Pro and PM851 solid-state drives and Seagate ST500LT015 and ST500LT025 hard disk drives, when used on Windows and operating in Opal mode on Lenovo ThinkPad T440s laptops with BIOS 2.32 or ThinkPad W541 laptops with BIOS 2.21, or in Opal or eDrive mode on Dell Latitude E6410 laptops with BIOS A16 or Latitude E6430 laptops with BIOS A16, allow physically proximate attackers to bypass self-encrypting drive (SED) protection by triggering a soft reset and booting from an alternative OS, aka a "Forced Restart Attack."

• CWE-254

• https://www.blackhat.com/docs/eu-15/materials/eu-15-Boteanu-Bypassing-Self-Encrypting-Drives-SED-In-Enterprise-Environments-wp.pdfTechnical Description, Third Party Advisory
• https://www.infoworld.com/article/3004913/encryption/self-encrypting-drives-are-hardly-any-better-than-software-based-encryption.htmlTechnical Description, Third Party Advisory
• https://www.blackhat.com/docs/eu-15/materials/eu-15-Boteanu-Bypassing-Self-Encrypting-Drives-SED-In-Enterprise-Environments-wp.pdfTechnical Description, Third Party Advisory
• https://www.infoworld.com/article/3004913/encryption/self-encrypting-drives-are-hardly-any-better-than-software-based-encryption.htmlTechnical Description, Third Party Advisory

Published

Nov 27, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-7262QNAP iArtist Lite before 1.4.54, as distributed with QNAP Si…
• CVE-2015-7263The SPDY/2 codec in Facebook Proxygen before 2015-11-09 allo…
• CVE-2015-7264The SPDY/2 codec in Facebook Proxygen before 2015-11-09 trun…
• CVE-2015-7265Facebook Proxygen before 2015-11-09 mismanages HTTPMessage.r…
• CVE-2015-7266The Interactive Advertising Bureau (IAB) OpenRTB 2.3 protoco…
• CVE-2015-7267Samsung 850 Pro and PM851 solid-state drives and Seagate ST5…
• CVE-2015-7269Seagate ST500LT015 hard disk drives, when operating in eDriv…
• CVE-2015-7270Dell Integrated Remote Access Controller (iDRAC) 6 before 2.…
• CVE-2015-7271Dell Integrated Remote Access Controller (iDRAC) 7/8 before …
• CVE-2015-7272Dell Integrated Remote Access Controller (iDRAC) 6 before 2.…
• CVE-2015-7273Dell Integrated Remote Access Controller (iDRAC) 7/8 before …
• CVE-2015-7274Dell Integrated Remote Access Controller (iDRAC) 6 before 2.…