Vulns & Exploits
Lenovo ThinkPlus FU100 USB Drive Stores Data on Unencrypted SD Card Despite AES-256 and Fingerprint Claims
A Lenovo USB drive sold in China under the ThinkPlus FU100 model was marketed with AES-256 encryption and fingerprint authentication. Investigation revealed that the device contained an ordinary unencrypted SD card holding all user data. The fingerprint reader served only to enable or disable USB communication rather than performing any cryptographic operations. Security researcher Xusheng Li identified the flaw and disclosed it to Lenovo. The company confirmed the product was distributed exclusively on the Chinese market and subsequently issued both software and hardware patches. The case highlights risks of misleading security marketing claims on consumer storage devices.
ekurakNov 6, 2026Translated from Polish