Intel SSD DC S4500/S4600 Series Vulnerability - US

Lenovo Security Advisory: LEN-28116

Potential Impact: Privilege escalation

Severity: Medium

Scope of Impact: Industry-wide

CVE Identifier: CVE-2018-18095

Summary Description:

Intel has reported a potential security vulnerability in Intel Solid State Drives (SSD) for Data Centers (DC) S4500/S4600 Series firmware that may allow escalation of privilege.

Mitigation Strategy for Customers (what you should do to protect yourself):

Intel recommends upgrading to the firmware version (or newer) for the models indicated in the Product Impact section below.

Lenovo Online SAS/SATA Hard Disk Drive Update Program for Linux version sas-1.28.04 or later.

Lenovo Online SAS/SATA Hard Disk Drive Update Program for Windows version sas-1.28.04 or later.