K56213806: Intel SSD INTEL-SA-00563 vulnerabilities

🗓️ 21 Feb 2023 18:34:59Reported by f5Type

f5🔗 my.f5.com👁 60 Views

Intel SSD firmware vulnerabilities, potential impact on Intel SSD and Optane SSD Product

Reporter	Title	Published	Views	Family All 91
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Intel Chipset affect IBM Cloud Pak System (CVE-2021-0060, CVE-2021-0147, CVE-2021-33080)	16 Aug 202218:39	–	ibm
BDU FSTEC	The vulnerability of microprogrammed storage software for Intel SSDs lies in the lack of protection for mission-critical data, allowing attackers to gain unauthorized access to protected information.	23 Jun 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of microprogrammed software in Intel SSD solid-state drives, related to resource release errors, allows a hacker to cause a service failure.	23 Jun 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of microprogrammed solid-state storage devices from Intel(R) Optane, Intel(R) Optane(TM) DC, and Intel(R) DC, related to the simultaneous execution using a shared resource with incorrect synchronization, allows attackers to cause service failures.	23 Jun 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Intel SSD microprogramming software lies in the simultaneous execution using a shared resource with improper synchronization, which allows a hacker to cause service failure.	26 Jul 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of microprogrammed solid-state storage devices like Intel SSDs lies in the lack of protection for operational data. This allows attackers to exploit their privileges and gain unauthorized access to protected information.	26 Jul 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of microprogrammed solid-state storage devices like Intel SSDs lies in the lack of protection for operational data. This allows attackers to exploit their privileges and gain unauthorized access to protected information.	26 Jul 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Intel SSD microprogramming software, related to the implementation of incorrect control flow, allows attackers to exploit their privileges.	26 Jul 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Intel SSD microprogramming software is related to implementation errors in authentication procedures. This allows attackers to carry out “man-in-the-middle” attacks and disclose sensitive information.	22 Aug 202200:00	–	bdu_fstec
Circl	CVE-2021-33074	12 May 202220:35	–	circl

21 Feb 2023 18:34Current

4.9Medium risk

Vulners AI Score4.9

CVSS 24.9

CVSS 3.16.8

EPSS0.0027

SSVC

improper resource shutdown protection mechanism failure race condition insufficient control flow management exposure of sensitive information improper authentication