VulnerabilityModified
CVE-2020-12309
Insufficiently protected credentialsin subsystem in some Intel(R) Client SSDs and some Intel(R) Data Center SSDs may allow an unauthenticated user to potentially enable information disclosure via physical access.
MEDIUM 4.6EPSS 0.33%
Does this matter?
Lower severity and a low EPSS score (0.33%). Track it; it rarely justifies an emergency change on its own.
Description
Insufficiently protected credentialsin subsystem in some Intel(R) Client SSDs and some Intel(R) Data Center SSDs may allow an unauthenticated user to potentially enable information disclosure via physical access.
- CVSS 3.1
- 4.6 MEDIUMCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- EPSS
- 0.33% probability · 26th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-522
- Affected
- intel/ssd pro 6000p firmware · intel/ssd pro 5450s firmware · intel/ssd e 5100s firmware · intel/ssd pro 5400s firmware · intel/ssd pro 7600p firmware · intel/ssd 760p firmware · intel/ssd e 6100p firmware · intel/ssd 660p firmware · intel/optane ssd 905p firmware · intel/optane ssd 900p firmware · intel/ssd dc p4510 firmware · intel/ssd dc p4610 firmware · intel/ssd dc p4800x firmware · intel/ssd dc p4801x firmware · intel/ssd dc p4101 firmware
- Source
- secure@intel.com
References
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.