CVEvulnerability

CVE-2020-12309

4.6 MEDIUM Published 2020-11-12 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-11-12
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
4.6 MEDIUM — CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0 ([email protected])
2.1 LOW — AV:L/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
CWE-522

Description

Insufficiently protected credentialsin subsystem in some Intel(R) Client SSDs and some Intel(R) Data Center SSDs may allow an unauthenticated user to potentially enable information disclosure via physical access.

Affected configurations

• intel ssd pro 6000p firmware (< psf131p) • intel ssd pro 5450s firmware (< lhf005p) • intel ssd e 5100s firmware (< lhf004e) • intel ssd pro 5400s firmware (< lbf017p) • intel ssd pro 7600p firmware (< 005p) • intel ssd 760p firmware (< 005c) • intel ssd e 6100p firmware (< 005e) • intel ssd 660p firmware (< 004c) • intel optane ssd 905p firmware (< e2010480) • intel optane ssd 900p firmware (< e2010480) • intel ssd dc p4510 firmware (< vdv10170) • intel ssd dc p4610 firmware (< vdv10170) • intel ssd dc p4800x firmware (< e2010485) • intel ssd dc p4801x firmware (< e2010485) • intel ssd dc p4101 firmware (< 008d) • intel ssd pro 5450s firmware (< lhf0b3p) • intel ssd e 5100s firmware (< lhf0ae3) • intel ssd pro 5400s firmware (< lsf043p)

Related

Weakness · CWE (1)

  • CWE-522 Insufficiently Protected Credentials weakness

References