CVE-2023-24588

🗓️ 14 Nov 2023 19:04:57Reported by intelType

Exposure of sensitive info in Intel Optane SSD firmware, potential info disclosure

Reporter	Title	Published	Views	Family All 13
BDU FSTEC	The vulnerability of Microprogramming Software for Intel® Optane(TM) solid-state drives lies in the lack of protection for mission-critical data, allowing attackers to exploit this weakness to disclose confidential information.	1 Dec 202300:00	–	bdu_fstec
Circl	CVE-2023-24588	3 Jan 202413:37	–	circl
CNNVD	Intel Optane SSD and Intel Optane SSD DC Security Vulnerabilities	14 Nov 202300:00	–	cnnvd
Cvelist	CVE-2023-24588	14 Nov 202319:04	–	cvelist
EUVD	EUVD-2023-28603	3 Oct 202520:07	–	euvd
Hewlett-Packard	Intel Optane™ SSD Firmware November 2023 Security Update	20 Nov 202300:00	–	hp
Intel	Intel® Optane™ SSD and Intel® Optane™ SSD DC Firmware Advisory	14 Nov 202300:00	–	intel
NVD	CVE-2023-24588	14 Nov 202319:15	–	nvd
OSV	CVE-2023-24588	14 Nov 202319:15	–	osv
Prion	Information disclosure	14 Nov 202319:15	–	prion

NVD

Node

intel optane_memory_h20_with_solid_state_storage_firmwareRange<u4110553-g004

AND

intel optane_memory_h20_with_solid_state_storageMatch-

Node

intel optane_ssd_900p_firmwareRange<e2010650

AND

intel optane_ssd_900pMatch-

Node

intel optane_ssd_dc_p4800x_firmwareRange<e2010650

AND

intel optane_ssd_dc_p4800xMatch-

Node

intel optane_ssd_dc_p4801x_firmwareRange<e2010650

AND

intel optane_ssd_dc_p4801xMatch-

Node

intel optane_ssd_905p_firmwareRange<e2010650

AND

intel optane_ssd_905pMatch-

[
  {
    "vendor": "n/a",
    "product": "Intel(R) Optane(TM) SSD products",
    "versions": [
      {
        "version": "firmware for some Intel(R) Optane(TM) SSD products",
        "status": "affected"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
intel	www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00758.html

17 Jun 2026 05:39Current

4.4Medium risk

Vulners AI Score4.4

CVSS 3.14.6 - 5.9

EPSS0.00307

SSVC

CWE-200