Lucene search
HistoryNov 14, 2023 - 7:15 p.m.
CVE-2023-24588
intel
optane
ssd
firmware
sensitive info
information disclosure
physical access
unauthorized actor
cve-2023-24588
4.6 Medium
CVSS3
Attack Vector
PHYSICAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
0.001 Low
EPSS
Percentile
22.1%
Exposure of sensitive information to an unauthorized actor in firmware for some Intel® Optane™ SSD products may allow an unauthenticated user to potentially enable information disclosure via physical access.
Affected configurations
Node
inteloptane_memory_h20_with_solid_state_storage_firmwareRange<u4110553-g004
inteloptane_memory_h20_with_solid_state_storageMatch-
Node
inteloptane_ssd_900p_firmwareRange<e2010650
inteloptane_ssd_900pMatch-
Node
inteloptane_ssd_dc_p4800x_firmwareRange<e2010650
inteloptane_ssd_dc_p4800xMatch-
Node
inteloptane_ssd_dc_p4801x_firmwareRange<e2010650
inteloptane_ssd_dc_p4801xMatch-
Node
inteloptane_ssd_905p_firmwareRange<e2010650
inteloptane_ssd_905pMatch-
Related
cve
cve
CVE-2023-24588
2023-11-14 19:15:18
cvelist
cvelist
CVE-2023-24588
2023-11-14 19:04:57
prion
prion
Information disclosure
2023-11-14 19:15:00
hp
hp
Intel Optane™ SSD Firmware November 2023 Security Update
2023-11-20 00:00:00
intel
intel
Intel® Optane™ SSD and Intel® Optane™ SSD DC Firmware Advisory
2023-11-14 00:00:00
4.6 Medium
CVSS3
Attack Vector
PHYSICAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
0.001 Low
EPSS
Percentile
22.1%
Related for NVD:CVE-2023-24588