CVE-2020-12311
Medium
Description
Insufficient control flow managementin firmware in some Intel(R) Client SSDs and some Intel(R) Data Center SSDs may allow an unauthenticated user to potentially enable information disclosure via physical access.
SeverityMedium
CVSS4.6
Exploit probability—
ProductIntel Ssd Pro 6000p Firmware
PublishedNov 12, 2020
First seenNov 12, 2020
How to fix
Update
- intel ssd_pro_6000p_firmwarepsf131p or later
- intel ssd_pro_5450s_firmwarelhf005p, lhf0b3p or later
- intel ssd_e_5100s_firmwarelhf004e, lhf0ae3 or later
- intel ssd_pro_5400s_firmwarelbf017p, lsf043p or later
- intel ssd_pro_7600p_firmware005p or later
- intel ssd_760p_firmware005c or later
- intel ssd_e_6100p_firmware005e or later
- intel ssd_660p_firmware004c or later
- intel optane_ssd_905p_firmwaree2010480 or later
- intel optane_ssd_900p_firmwaree2010480 or later
- intel ssd_dc_p4510_firmwarevdv10170 or later
- intel ssd_dc_p4610_firmwarevdv10170 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| intel ssd_pro_6000p_firmware | v < psf131p | psf131p |
| intel ssd_pro_5450s_firmware | v < lhf005p, v < lhf0b3p | lhf005p, lhf0b3p |
| intel ssd_e_5100s_firmware | v < lhf004e, v < lhf0ae3 | lhf004e, lhf0ae3 |
| intel ssd_pro_5400s_firmware | v < lbf017p, v < lsf043p | lbf017p, lsf043p |
| intel ssd_pro_7600p_firmware | v < 005p | 005p |
| intel ssd_760p_firmware | v < 005c | 005c |
| intel ssd_e_6100p_firmware | v < 005e | 005e |
| intel ssd_660p_firmware | v < 004c | 004c |
| intel optane_ssd_905p_firmware | v < e2010480 | e2010480 |
| intel optane_ssd_900p_firmware | v < e2010480 | e2010480 |
| intel ssd_dc_p4510_firmware | v < vdv10170 | vdv10170 |
| intel ssd_dc_p4610_firmware | v < vdv10170 | vdv10170 |
| intel ssd_dc_p4800x_firmware | v < e2010485 | e2010485 |
| intel ssd_dc_p4801x_firmware | v < e2010485 | e2010485 |
| intel ssd_dc_p4101_firmware | v < 008d | 008d |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.