Medium severity6.5NVD Advisory· Published Mar 19, 2021· Updated Jun 17, 2026

CVE-2021-28653

Description

The iOS and macOS apps before 1.4.1 for the Western Digital G-Technology ArmorLock NVMe SSD store keys insecurely. They choose a non-preferred storage mechanism if the device has Secure Enclave support but lacks biometric authentication hardware.

Affected products

Westerndigital/Armorlock2 versions
cpe:2.3:a:westerndigital:armorlock:*:*:*:*:*:iphone_os:*:*+ 1 more
- cpe:2.3:a:westerndigital:armorlock:*:*:*:*:*:iphone_os:*:*range: <1.4.1
- cpe:2.3:a:westerndigital:armorlock:*:*:*:*:*:macos:*:*range: <1.4.1
Westerndigital/G-Technology ArmorLock NVMe SSDllm-fuzzy
Range: <1.4.1

Patches

Vulnerability mechanics

References

www.westerndigital.com/support/productsecurity/wdc-21003-armorLock-insecure-key-storage-vulnerabilitynvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000