CVE-2020-13799

Western Digital has identified a security vulnerability in the Replay Protected Memory Block (RPMB) protocol as specified in multiple standards for storage device interfaces, including all versions of eMMC, UFS, and NVMe. The RPMB protocol is specified by industry standards bodies and is implemented by storage devices from multiple vendors to assist host systems in securing trusted firmware. Several scenarios have been identified in which the RPMB state may be affected by an attacker without the knowledge of the trusted component that uses the RPMB feature.

• CWE-294

• https://www.kb.cert.org/vuls/id/231329Third Party Advisory, US Government Resource
• https://www.kb.cert.org/vuls/id/231329Third Party Advisory, US Government Resource
• https://www.kb.cert.org/vuls/id/231329Third Party Advisory, US Government Resource
• https://www.kb.cert.org/vuls/id/231329Third Party Advisory, US Government Resource
• https://www.westerndigital.com/support/productsecurity/wdc-20008-replay-attack-vulnerabilities-rpmb-protocol-applicationsVendor Advisory
• https://www.kb.cert.org/vuls/id/231329Third Party Advisory, US Government Resource
• https://www.kb.cert.org/vuls/id/231329Third Party Advisory, US Government Resource
• https://www.kb.cert.org/vuls/id/231329Third Party Advisory, US Government Resource
• https://www.kb.cert.org/vuls/id/231329Third Party Advisory, US Government Resource
• https://www.westerndigital.com/support/productsecurity/wdc-20008-replay-attack-vulnerabilities-rpmb-protocol-applicationsVendor Advisory

Published

Nov 18, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-13793Unsafe storage of AD credentials in Ivanti DSM netinst 5.1 d…9.8
• CVE-2020-13794Harbor 1.9.* 1.10.* and 2.0.* allows Exposure of Sensitive I…4.3
• CVE-2020-13795An issue was discovered in Navigate CMS through 2.8.7. It al…5.3
• CVE-2020-13796An issue was discovered in Navigate CMS through 2.8.7. It al…6.1
• CVE-2020-13797An issue was discovered in Navigate CMS through 2.8.7. It al…6.1
• CVE-2020-13798An issue was discovered in Navigate CMS through 2.8.7. It al…6.1
• CVE-2020-1380A remote code execution vulnerability exists in the way that…7.8
• CVE-2020-13800ati-vga in hw/display/ati.c in QEMU 4.2.0 allows guest OS us…6
• CVE-2020-13802Rebar3 versions 3.0.0-beta.3 to 3.13.2 are vulnerable to OS …9.8
• CVE-2020-13803An issue was discovered in Foxit PhantomPDF Mac and Foxit Re…7.5
• CVE-2020-13804An issue was discovered in Foxit Reader and PhantomPDF befor…9.8
• CVE-2020-13805An issue was discovered in Foxit Reader and PhantomPDF befor…9.8