Intel SSD Firmware Denial of Service - US

Lenovo Security Advisory: LEN-26626 Potential Impact: Denial of service Severity: Moderate Scope of Impact: Industry-wide CVE Identifier: CVE-2017-5695 Summary Description: Intel has notified Lenovo of a vulnerability, requiring physical drive access, in the Intel® SSD 540s, Intel® Pro 5400s,...

Intel SSD Firmware Denial of Service - Lenovo Support US

No description provided...

Walkthrough. Investigating an SSD

I had an interesting job come in. A client wants the data off a dead SSD, and it’s a model that regular data recovery companies won’t deal with, an SK Hynix drive. It’s used extensively on many Dell laptops. The drive is NVMe which means it uses several PCIe lanes for communication. First things...

Intel Optane SSD DC P4800X Denial of Service Vulnerability

The Intel Optane SSD DC P4800X is a solid state drive from Intel USA. A security vulnerability exists in the firmware in versions prior to Intel Optane SSD DC P4800X E2010435, which stems from a program failing to write-protect. A local attacker could exploit the vulnerability to cause a denial o...

Intel SSD Data Center Tool for Windows Elevation of Privilege Vulnerability

Intel SSD Data Center Tool for Windows is a Windows-based SSD management tool from Intel USA. It supports configuration of SSDs using PCIe and SATA and detects the status of SSDs. A security vulnerability exists in versions of Intel SSD Data Center Tool prior to 3.0.17 for Windows-based platforms...

Input validation

Improper directory permissions in the installer for the IntelR SSD Data Center Tool for Windows before v3.0.17 may allow authenticated users to potentially enable an escalation of privilege via local access...

CVE-2018-12166

Insufficient write protection in firmware for IntelR OptaneTM SSD DC P4800X before version E2010435 may allow a privileged user to potentially enable a denial of service via local access...

CVE-2018-3703

Improper directory permissions in the installer for the IntelR SSD Data Center Tool for Windows before v3.0.17 may allow authenticated users to potentially enable an escalation of privilege via local access...

CVE-2018-12167

Firmware update routine in bootloader for IntelR OptaneTM SSD DC P4800X before version E2010435 may allow a privileged user to potentially enable a denial of service via local access...

CVE-2018-3703

Improper directory permissions in the installer for the IntelR SSD Data Center Tool for Windows before v3.0.17 may allow authenticated users to potentially enable an escalation of privilege via local access...

CVE-2018-12166

Insufficient write protection in firmware for IntelR OptaneTM SSD DC P4800X before version E2010435 may allow a privileged user to potentially enable a denial of service via local access...

Authorization

Insufficient write protection in firmware for IntelR OptaneTM SSD DC P4800X before version E2010435 may allow a privileged user to potentially enable a denial of service via local access...

Design/Logic Flaw

Firmware update routine in bootloader for IntelR OptaneTM SSD DC P4800X before version E2010435 may allow a privileged user to potentially enable a denial of service via local access...

CVE-2018-3703

Intel’s advisory for CVE-2018-3703 describes an elevation-of-privilege vulnerability in the Intel SSD Data Center Tool for Windows prior to v3.0.17 caused by improper directory permissions in the installer. The issue could let authenticated local users escalate privileges. A mitigation is to upda...

CVE-2018-3703

Improper directory permissions in the installer for the IntelR SSD Data Center Tool for Windows before v3.0.17 may allow authenticated users to potentially enable an escalation of privilege via local access...

CVE-2018-12167

Firmware update routine in bootloader for IntelR OptaneTM SSD DC P4800X before version E2010435 may allow a privileged user to potentially enable a denial of service via local access...

CVE-2018-12166

Insufficient write protection in firmware for IntelR OptaneTM SSD DC P4800X before version E2010435 may allow a privileged user to potentially enable a denial of service via local access...

CVE-2018-12166

CVE-2018-12166 affects Intel® Optane™ SSD DC P4800X firmware prior to version E2010435. The issue is insufficient write protection that may allow a privileged local user to cause a denial of service. Intel’s advisory INTEL-SA-00175 confirms affected products and the recommended remediation: updat...

CVE-2018-12167

Intel Optane SSD DC P4800X firmware: CVE-2018-12167 involves the bootloader firmware update routine where a privileged local attacker could enable a denial of service. Affected pre-E2010435 revisions are vulnerable. Intel advisory INTEL-SA-00175 confirms the issue and provides remediation guidanc...

Intel Patches High-Severity Privilege-Escalation Bugs

Intel on Tuesday patched three high-severity vulnerabilities that could allow the escalation of privileges across an array of products. Overall, the chip giant fixed five bugs – three rated high-severity, and two medium-severity. The most concerning of these bugs is an escalation-of-privilege...