Intel SSD Firmware Denial of Service - US

Lenovo Security Advisory: LEN-26626

Potential Impact: Denial of service

Severity: Moderate

Scope of Impact: Industry-wide

CVE Identifier: CVE-2017-5695

Summary Description:

Intel has notified Lenovo of a vulnerability, requiring physical drive access, in the Intel® SSD 540s, Intel® Pro 5400s, Intel® E 5400s, and Intel® DC S3100 Series that could cause data corruption or data loss leading to a denial of service condition. This issue applies only to systems with ATA locked and Opal activated drives.

Mitigation Strategy for Customers (what you should do to protect yourself):

Intel recommends upgrading to the firmware version sas-1.28.04 (or newer) indicated for your model in the Product Impact section below.