Published: 12/11/2020 Updated: 24/11/2020

CVSS v2 Base Score: 2.1 | Impact Score: 2.9 | Exploitability Score: 3.9

CVSS v3 Base Score: 4.6 | Impact Score: 3.6 | Exploitability Score: 0.9

VMScore: 187

Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N

Insufficiently protected credentialsin subsystem in some Intel(R) Client SSDs and some Intel(R) Data Center SSDs may allow an unauthenticated user to potentially enable information disclosure via physical access.

Vulnerable Product	Search on Vulmon	Subscribe to Product
intel ssd_pro_6000p_firmware
intel ssd_pro_5450s_firmware
intel ssd_e_5100s_firmware
intel ssd_pro_5400s_firmware
intel ssd_pro_7600p_firmware
intel ssd_760p_firmware
intel ssd_e_6100p_firmware
intel ssd_660p_firmware
intel optane_ssd_905p_firmware
intel optane_ssd_900p_firmware
intel ssd_dc_p4510_firmware
intel ssd_dc_p4610_firmware
intel ssd_dc_p4800x_firmware
intel ssd_dc_p4801x_firmware
intel ssd_dc_p4101_firmware

Intel has informed HP of potential security vulnerabilities identified in multiple Intel® Solid State Drive (SSD) products which may allow information disclosure Intel is releasing firmware updates to mitigate these potential vulnerabilities ...

CWE-522 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00362 https://nvd.nist.gov https://support.hp.com/us-en/document/c06961734

CVE-2020-12309

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect