MEDIUM✓ PATCH🇵🇱 Wersja polska

CVE-2023-24588

CVSS 5.9v3.1pub. 2023-11-14upd. 2024-11-21

Exposure of sensitive information to an unauthorized actor in firmware for some Intel(R) Optane(TM) SSD products may allow an unauthenticated user to potentially enable information disclosure via physical access.

CVSS Vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N

  • Intel Optane Memory H20 With Solid State Storage

    HW
    Intel
    all versions

  • Intel Optane Memory H20 With Solid State Storage Firmware

    OS
    Intel
    < u4110553-g004

  • Intel Optane Ssd 900p

    HW
    Intel
    all versions

  • Intel Optane Ssd 900p Firmware

    OS
    Intel
    < e2010650

  • Intel Optane Ssd 905p

    HW
    Intel
    all versions

  • Intel Optane Ssd 905p Firmware

    OS
    Intel
    < e2010650

  • Intel Optane Ssd Dc P4800x

    HW
    Intel
    all versions

  • Intel Optane Ssd Dc P4800x Firmware

    OS
    Intel
    < e2010650

  • Intel Optane Ssd Dc P4801x

    HW
    Intel
    all versions

  • Intel Optane Ssd Dc P4801x Firmware

    OS
    Intel
    < e2010650
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
CWE
References

Related vulnerabilities

CVE-2023-27519MEDIUM6.9same product

Improper input validation in firmware for some Intel(R) Optane(TM) SSD products may allow a privileged user to...

CVE-2023-27879MEDIUM6.8same product

Improper access control in firmware for some Intel(R) Optane(TM) SSD products may allow an unauthenticated use...

CVE-2023-24587MEDIUM6.9same product

Insufficient control flow management in firmware for some Intel(R) Optane(TM) SSD products may allow a privile...

CVE-2023-27306MEDIUM6.5same product

Improper Initialization in firmware for some Intel(R) Optane(TM) SSD products may allow an authenticated user ...

CVE-2021-33077MEDIUM6.8same product

Insufficient control flow management in firmware for some Intel(R) SSD, Intel(R) Optane(TM) SSD and Intel(R) S...