CVE-2021-33083

CVE-2021-33083 : Improper authentication in firmware for Intel® SSD and Intel® Optane™ SSD/SSD DC products may allow a privileged user to disclose information via local access. Intel’s advisory (Intel® Optane™ SSD Firmware Advisory, CVE-2021-33083) confirms the root cause in firmware authenticati...

CVE-2021-33075

CVE-2021-33075 describes a race condition in the firmware of several Intel SSD/Optane products that may let a privileged local user cause a denial of service. Affected families include Intel Optane SSD DC D4800X, P4800X/P4801X, P5800X, and SSD DC lines, plus Optane Memory H10/H20. The Intel advis...

CVE-2021-33078

CVE-2021-33078 involves a race condition in the firmware of Intel Optane SSD and Intel SSD DC products. The issue, described across multiple sources (Intel/Solidigm advisory, Red Hat, CVE lists), is a race condition within a firmware thread that may allow a privileged local attacker to cause a de...

CVE-2021-33082

CVE-2021-33082 affects Intel® Optane™ SSD and Intel® SSD firmware where sensitive resources are not removed before reuse, potentially enabling information disclosure by an unauthenticated user with physical access. The Red Hat/Intel advisory and Intel solidigm materials describe the root cause as...

CVE-2021-33074

CVE-2021-33074 pertains to a protection mechanism failure in firmware of Intel SSD, Intel SSD DC, and Intel Optane SSD products, potentially allowing an unauthenticated local attacker with physical access to disclose information. Affected devices include several Intel/ Solidigm SSD families; root...

CVE-2021-33080

CVE-2021-33080 is a vulnerability in firmware of Intel® SSD DC, Intel® Optane™ SSD, and Intel® Optane™ SSD DC products caused by uncleared debug information, which may allow an unauthenticated user to disclose sensitive system information or escalate privileges with physical access. The NVD entry...

CVE-2021-33077

CVE-2021-33077 involves insufficient control flow management in firmware of Intel® Optane™ SSD and Intel® SSD DC products, potentially enabling privilege escalation by an unauthenticated user with physical access. Affected Intel products include Optane SSD DC D4800X Series, Optane DC P4800X/P4801...

CVE-2021-33069

CVE-2021-33069 (Intel/Optane SSD firmware) is due to improper resource shutdown or release in firmware, enabling a local-privilege user to potentially cause denial of service. Affected: Intel SSD, Intel SSD DC, Intel Optane SSD, Intel Optane SSD DC firmware. Mitigation: Intel/Solidigm advisories ...

CVE-2020-12311

CVE-2020-12311 concerns firmware on some Intel® client and data center SSDs where insufficient control flow management could allow an unauthenticated user with physical access to potentially disclose information. The issue is documented by Intel in advisory Intel-SA-00362 and is reflected across ...

CVE-2020-12309

Intel has published an advisory for CVE-2020-12309 noting insufficiently protected credentials in the subsystem of several Intel SSDs that could allow information disclosure with physical access. The Red Hat security note and Intel advisory enumerate affected products and required mitigations via...

CVE-2020-12310

The CVE-2020-12310 entry is supported by connected documents: Intel’s advisory (INTEL-SA-00362) details a vulnerability in firmware of multiple Intel SSD lines where insufficient control flow management could allow information disclosure via physical access, unauthenticated. The CVE is listed in ...

CVE-2023-27306

CVE-2023-27306 affects Intel Optane SSD firmware. The issue is described as improper initialization in the firmware of Intel Optane SSD/SSD DC products, which could allow an authenticated local user to cause denial of service. Practical impact stated: availability loss via local access; attack ve...

CVE-2020-0584

CVE-2020-0584 is a buffer overflow in firmware for Intel® SSD DC P4800X/P4801X and Intel® Optane™ SSD 900P/905P that may allow an unauthenticated, local user to cause a denial of service. The public sources confirm a firmware-level vulnerability in Intel SSD firmware, with Red Hat and Intel advis...

CVE-2023-24587

CVE-2023-24587 is a vulnerability in Intel® Optane™ SSD and Optane™ SSD DC firmware. The issue is described as insufficient control flow management in the firmware, which could allow a privileged user with local access to potentially trigger a denial of service. The advisory INTEL-SA-00758 confir...

CVE-2023-27519

CVE-2023-27519 affects Intel Optane SSD/SSD DC firmware. The issue is improper input validation in the firmware that could allow a privileged user to escalate privileges via local access. Intel’s advisory (Intel-SA-00758) confirms multiple related CVEs and provides mitigation: firmware updates to...

CVE-2023-24588

The CVE-2023-24588 issue is an information-disclosure vulnerability in firmware of some Intel Optane SSDs (including memory and DC series). The Intel advisory INTEL-SA-00758 and vendor updates indicate the root cause is exposure of protected data via physical access, with mitigations consisting o...