CVE-2021-0148
Medium
Description
Insertion of information into log file in firmware for some Intel(R) SSD DC may allow a privileged user to potentially enable information disclosure via local access.
SeverityMedium
CVSS4.4
Exploit probability—
ProductIntel Ssd Dc D4512 Firmware
PublishedNov 17, 2021
First seenNov 17, 2021
How to fix
Update
- intel ssd_dc_d4512_firmwareet10 or later
- intel ssd_dc_p4510_u.2_firmwarevdv10182 or later
- intel ssd_dc_p4510_edsff_firmwarevdv10284 or later
- intel ssd_dc_p4511_edsff_firmwarevdv10284 or later
- intel ssd_dc_p4511_m.2_firmwarevdv10384 or later
- intel ssd_dc_p4610_u.2_firmwarevdv10182 or later
- intel ssd_dc_p4618_firmwarevdv10182 or later
- intel ssd_d-s4510_firmwarexcv10140 or later
- intel ssd_d7-p5608_firmware2cv1r106 or later
- intel ssd_d7-p5500_firmware1.2.0, 2cv1c030, 2cv1r106, 2cv1l029 or later
- intel ssd_d7-p5600_firmware1.2.0, 2cv1l029, 2cv1c030 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| intel ssd_dc_d4512_firmware | v < et10 | et10 |
| intel ssd_dc_p4510_u.2_firmware | v < vdv10182 | vdv10182 |
| intel ssd_dc_p4510_edsff_firmware | v < vdv10284 | vdv10284 |
| intel ssd_dc_p4511_edsff_firmware | v < vdv10284 | vdv10284 |
| intel ssd_dc_p4511_m.2_firmware | v < vdv10384 | vdv10384 |
| intel ssd_dc_p4610_u.2_firmware | v < vdv10182 | vdv10182 |
| intel ssd_dc_p4618_firmware | v < vdv10182 | vdv10182 |
| intel ssd_d-s4510_firmware | v < xcv10140 | xcv10140 |
| intel ssd_d7-p5608_firmware | v < 2cv1r106 | 2cv1r106 |
| intel ssd_d7-p5500_firmware | v < 1.2.0, v < 2cv1c030, v < 2cv1r106, v < 2cv1l029 | 1.2.0, 2cv1c030, 2cv1r106, 2cv1l029 |
| intel ssd_d7-p5600_firmware | v < 1.2.0, v < 2cv1l029, v < 2cv1c030 | 1.2.0, 2cv1l029, 2cv1c030 |
| intel ssd_d5-p4320_firmware | No range specified | — |
| intel ssd_d5-p4420_firmware | No range specified | — |
| intel ssd_d5-p4326_firmware | No range specified | — |
| intel ssd_dc_p4500_firmware | No range specified | — |
| intel ssd_dc_p4501_firmware | No range specified | — |
| intel ssd_dc_p4600_firmware | No range specified | — |
| intel ssd_dc_p4608_firmware | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.