CVE-2023-27519
Medium
Description
Improper input validation in firmware for some Intel(R) Optane(TM) SSD products may allow a privileged user to potentially enable escalation of privilege via local access.
SeverityMedium
CVSS6.9
Exploit probability—
ProductIntel Optane Memory H20 With Solid State Storage Firmware
PublishedNov 14, 2023
First seenNov 14, 2023
Weakness typeCWE-20Improper input validation
How to fix
Update
- intel optane_memory_h20_with_solid_state_storage_firmwareu4110553-g004 or later
- intel optane_ssd_900p_firmwaree2010650 or later
- intel optane_ssd_dc_p4800x_firmwaree2010650 or later
- intel optane_ssd_dc_p4801x_firmwaree2010650 or later
- intel optane_ssd_905p_firmwaree2010650 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| intel optane_memory_h20_with_solid_state_storage_firmware | v < u4110553-g004 | u4110553-g004 |
| intel optane_ssd_900p_firmware | v < e2010650 | e2010650 |
| intel optane_ssd_dc_p4800x_firmware | v < e2010650 | e2010650 |
| intel optane_ssd_dc_p4801x_firmware | v < e2010650 | e2010650 |
| intel optane_ssd_905p_firmware | v < e2010650 | e2010650 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.