CVE-2023-24588

published 2023-11-14

CVE-2023-24588: Exposure of sensitive information to an unauthorized actor in firmware for some Intel(R) Optane(TM) SSD products may allow an unauthenticated user to…

Priority P4 16 medium 4.6 CVSS 3.1

AV P AC L PR N UI N S U C H I N A N

Exposure of sensitive information to an unauthorized actor in firmware for some Intel(R) Optane(TM) SSD products may allow an unauthenticated user to potentially enable information disclosure via physical access.

Affected

5 ranges

Vendor	Product	Version range	Fixed in
intel	optane_memory_h20_with_solid_state_storage_firmware	< u4110553-g004	u4110553-g004
intel	optane_ssd_900p_firmware	< e2010650	e2010650
intel	optane_ssd_905p_firmware	< e2010650	e2010650
intel	optane_ssd_dc_p4800x_firmware	< e2010650	e2010650
intel	optane_ssd_dc_p4801x_firmware	< e2010650	e2010650

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-200