Lucene search

K
cve[email protected]CVE-2023-27306
HistoryNov 14, 2023 - 7:15 p.m.

CVE-2023-27306

2023-11-1419:15:20
CWE-665
web.nvd.nist.gov
16
cve-2023-27306
intel
optane ssd
firmware
denial of service
nvd

6.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

5.3 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

Improper Initialization in firmware for some Intel® Optane™ SSD products may allow an authenticated user to potentially enable denial of service via local access.

Affected configurations

NVD
Node
inteloptane_memory_h20_with_solid_state_storageMatch-
AND
inteloptane_memory_h20_with_solid_state_storage_firmwareRange<u4110553-g004
Node
inteloptane_ssd_900pMatch-
AND
inteloptane_ssd_900p_firmwareRange<e2010650
Node
inteloptane_ssd_dc_p4800xMatch-
AND
inteloptane_ssd_dc_p4800x_firmwareRange<e2010650
Node
inteloptane_ssd_dc_p4801xMatch-
AND
inteloptane_ssd_dc_p4801x_firmwareRange<e2010650
Node
inteloptane_ssd_905pMatch-
AND
inteloptane_ssd_905p_firmwareRange<e2010650

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "Intel(R) Optane(TM) SSD products",
    "versions": [
      {
        "version": "See references",
        "status": "affected"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

6.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

5.3 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

Related for CVE-2023-27306