Advisory Published


First published: Thu Nov 12 2020(Updated: )

Insufficiently protected credentialsin subsystem in some Intel(R) Client SSDs and some Intel(R) Data Center SSDs may allow an unauthenticated user to potentially enable information disclosure via physical access.


Affected SoftwareAffected VersionHow to fix
Intel Ssd Pro 6000p Firmware<psf131p
Intel Ssd Pro 6000p
Intel Ssd Pro 5450s Firmware<lhf005p
Intel Ssd Pro 5450s
Intel Ssd E 5100s Firmware<lhf004e
Intel Ssd E 5100s
Intel Ssd Pro 5400s Firmware<lbf017p
Intel Ssd Pro 5400s
Intel Ssd Pro 7600p Firmware<005p
Intel Ssd Pro 7600p
Intel Ssd 760p Firmware<005c
Intel Ssd 760p
Intel Ssd E 6100p Firmware<005e
Intel Ssd E 6100p
Intel Ssd 660p Firmware<004c
Intel Ssd 660p
Intel Optane Ssd 905p Firmware<e2010480
Intel Optane Ssd 905p
Intel Optane Ssd 900p Firmware<e2010480
Intel Optane Ssd 900p
Intel Ssd Dc P4510 Firmware<vdv10170
Intel Ssd Dc P4510
Intel Ssd Dc P4610 Firmware<vdv10170
Intel Ssd Dc P4610
Intel Ssd Dc P4800x Firmware<e2010485
Intel Ssd Dc P4800x
Intel Ssd Dc P4801x Firmware<e2010485
Intel Ssd Dc P4801x
Intel Ssd Dc P4101 Firmware<008d
Intel Ssd Dc P4101
Intel Ssd Pro 5450s Firmware<lhf0b3p
Intel Ssd E 5100s Firmware<lhf0ae3
Intel Ssd Pro 5400s Firmware<lsf043p

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Frequently Asked Questions

  • What is CVE-2020-12309?

    CVE-2020-12309 refers to an insufficiently protected credentials vulnerability in the subsystem of certain Intel(R) Client SSDs and Intel(R) Data Center SSDs.

  • How can an unauthenticated user potentially exploit CVE-2020-12309?

    An unauthenticated user may be able to enable information disclosure via physical access.

  • What is the severity rating of CVE-2020-12309?

    CVE-2020-12309 has a severity rating of medium with a score of 4.6.

  • Which Intel(R) SSDs are affected by CVE-2020-12309?

    Some Intel(R) Client SSDs and Intel(R) Data Center SSDs are affected by CVE-2020-12309.

  • How can I find more information about CVE-2020-12309?

    You can find more information about CVE-2020-12309 on the Intel Security Center Advisory page.


SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203