CVE-2023-24587

CWE-6913 documents3 sources

Severity

4.4MEDIUM

EPSS

0.0%

top 87.51%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Intel Optane Memory H20 With Solid State Storage Firmware Intel Optane SSD 900p Firmware Intel Optane SSD 905p Firmware +2 more

Timeline

PublishedNov 14

Description

Insufficient control flow management in firmware for some Intel(R) Optane(TM) SSD products may allow a privileged user to potentially enable denial of service via local access.

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:N/I:H/A:HExploitability: 0.6 | Impact: 5.8

Affected Packages6 packages

▶NVDintel/optane_ssd_900p_firmware< e2010650

▶NVDintel/optane_ssd_905p_firmware< e2010650

▶NVDintel/optane_ssd_dc_p4800x_firmware< e2010650

▶NVDintel/optane_ssd_dc_p4801x_firmware< e2010650

▶NVDintel/optane_memory_h20_with_solid_state_storage_firmware< u4110553-g004

🔴Vulnerability Details

GHSA

GHSA-35qw-3m24-r2j5: Insufficient control flow management in firmware for some Intel(R) Optane(TM) SSD products may allow a privileged user to potentially enable denial of↗2023-11-14

▶

CVEList

CVE-2023-24587: Insufficient control flow management in firmware for some Intel(R) Optane(TM) SSD products may allow a privileged user to potentially enable denial of↗2023-11-14

▶