Lucene search

[email protected]CVE-2020-12309

HistoryNov 12, 2020 - 6:15 p.m.

CVE-2020-12309

2020-11-1218:15:00

CWE-522

[email protected]

web.nvd.nist.gov

cve-2020-12309

intel

ssds

credentials

information disclosure

nvd

vulnerability

4.6 Medium

CVSS3

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

5 Medium

AI Score

Confidence

High

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

0.001 Low

EPSS

Percentile

29.9%

JSON

Insufficiently protected credentialsin subsystem in some Intel® Client SSDs and some Intel® Data Center SSDs may allow an unauthenticated user to potentially enable information disclosure via physical access.

CPENameOperatorVersion
intel:ssd_pro_6000p_firmwareintel ssd pro 6000p firmwareltpsf131p
intel:ssd_pro_5450s_firmwareintel ssd pro 5450s firmwareltlhf005p
intel:ssd_e_5100s_firmwareintel ssd e 5100s firmwareltlhf004e
intel:ssd_pro_5400s_firmwareintel ssd pro 5400s firmwareltlbf017p
intel:ssd_pro_7600p_firmwareintel ssd pro 7600p firmwarelt005p
intel:ssd_760p_firmwareintel ssd 760p firmwarelt005c
intel:ssd_e_6100p_firmwareintel ssd e 6100p firmwarelt005e
intel:ssd_660p_firmwareintel ssd 660p firmwarelt004c
intel:optane_ssd_905p_firmwareintel optane ssd 905p firmwarelte2010480
intel:optane_ssd_900p_firmwareintel optane ssd 900p firmwarelte2010480

CPE	Name	Operator	Version
intel:ssd_pro_6000p_firmware	intel ssd pro 6000p firmware	lt	psf131p
intel:ssd_pro_5450s_firmware	intel ssd pro 5450s firmware	lt	lhf005p
intel:ssd_e_5100s_firmware	intel ssd e 5100s firmware	lt	lhf004e
intel:ssd_pro_5400s_firmware	intel ssd pro 5400s firmware	lt	lbf017p
intel:ssd_pro_7600p_firmware	intel ssd pro 7600p firmware	lt	005p
intel:ssd_760p_firmware	intel ssd 760p firmware	lt	005c
intel:ssd_e_6100p_firmware	intel ssd e 6100p firmware	lt	005e
intel:ssd_660p_firmware	intel ssd 660p firmware	lt	004c
intel:optane_ssd_905p_firmware	intel optane ssd 905p firmware	lt	e2010480
intel:optane_ssd_900p_firmware	intel optane ssd 900p firmware	lt	e2010480

Rows per page:

1-10 of 181

References

www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00362

4.6 Medium

CVSS3

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

5 Medium

AI Score

Confidence

High

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

0.001 Low

EPSS

Percentile

29.9%

JSON

Related for CVE-2020-12309

prion1 hp1 f51 intel1 lenovo1 threatpost1