CVE-2020-12309

published 2020-11-12

CVE-2020-12309: Insufficiently protected credentialsin subsystem in some Intel(R) Client SSDs and some Intel(R) Data Center SSDs may allow an unauthenticated user to…

Priority P4 17 medium 4.6 CVSS 3.1

AV P AC L PR N UI N S U C H I N A N

Insufficiently protected credentialsin subsystem in some Intel(R) Client SSDs and some Intel(R) Data Center SSDs may allow an unauthenticated user to potentially enable information disclosure via physical access.

Affected

18 ranges

Vendor	Product	Version range	Fixed in
intel	optane_ssd_900p_firmware	< e2010480	e2010480
intel	optane_ssd_905p_firmware	< e2010480	e2010480
intel	ssd_660p_firmware	< 004c	004c
intel	ssd_760p_firmware	< 005c	005c
intel	ssd_dc_p4101_firmware	< 008d	008d
intel	ssd_dc_p4510_firmware	< vdv10170	vdv10170
intel	ssd_dc_p4610_firmware	< vdv10170	vdv10170
intel	ssd_dc_p4800x_firmware	< e2010485	e2010485
intel	ssd_dc_p4801x_firmware	< e2010485	e2010485
intel	ssd_e_5100s_firmware	< lhf004e	lhf004e
intel	ssd_e_5100s_firmware	< lhf0ae3	lhf0ae3
intel	ssd_e_6100p_firmware	< 005e	005e
intel	ssd_pro_5400s_firmware	< lbf017p	lbf017p
intel	ssd_pro_5400s_firmware	< lsf043p	lsf043p
intel	ssd_pro_5450s_firmware	< lhf005p	lhf005p
intel	ssd_pro_5450s_firmware	< lhf0b3p	lhf0b3p
intel	ssd_pro_6000p_firmware	< psf131p	psf131p
intel	ssd_pro_7600p_firmware	< 005p	005p

CVSS provenance

nvd v3.1 4.6 MEDIUM CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

nvd v2.0 2.1 LOW AV:L/AC:L/Au:N/C:P/I:N/A:N

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-522