CVE-2023-27306

CWE-6653 documents3 sources

Severity

5.5MEDIUM

EPSS

0.1%

top 82.85%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Intel Optane Memory H20 With Solid State Storage Firmware Intel Optane SSD 900p Firmware Intel Optane SSD 905p Firmware +2 more

Timeline

PublishedNov 14

Description

Improper Initialization in firmware for some Intel(R) Optane(TM) SSD products may allow an authenticated user to potentially enable denial of service via local access.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:HExploitability: 2.0 | Impact: 4.0

Affected Packages6 packages

▶NVDintel/optane_ssd_900p_firmware< e2010650

▶NVDintel/optane_ssd_905p_firmware< e2010650

▶NVDintel/optane_ssd_dc_p4800x_firmware< e2010650

▶NVDintel/optane_ssd_dc_p4801x_firmware< e2010650

▶NVDintel/optane_memory_h20_with_solid_state_storage_firmware< u4110553-g004

🔴Vulnerability Details

GHSA

GHSA-279v-q4q9-mx7j: Improper Initialization in firmware for some Intel(R) Optane(TM) SSD products may allow an authenticated user to potentially enable denial of service↗2023-11-14

▶

CVEList

CVE-2023-27306: Improper Initialization in firmware for some Intel(R) Optane(TM) SSD products may allow an authenticated user to potentially enable denial of service↗2023-11-14

▶