Advisory Published
Updated

CVE-2020-12310

First published: Thu Nov 12 2020(Updated: )

Insufficient control flow managementin firmware in some Intel(R) Client SSDs and some Intel(R) Data Center SSDs may allow an unauthenticated user to potentially enable information disclosure via physical access.

Credit: secure@intel.com

Affected SoftwareAffected VersionHow to fix
Intel Ssd Pro 6000p Firmware<psf131p
Intel Ssd Pro 6000p
Intel Ssd Pro 5450s Firmware<lhf005p
Intel Ssd Pro 5450s
Intel Ssd E 5100s Firmware<lhf004e
Intel Ssd E 5100s
Intel Ssd Pro 5400s Firmware<lbf017p
Intel Ssd Pro 5400s
Intel Ssd Pro 7600p Firmware<005p
Intel Ssd Pro 7600p
Intel Ssd 760p Firmware<005c
Intel Ssd 760p
Intel Ssd E 6100p Firmware<005e
Intel Ssd E 6100p
Intel Ssd 660p Firmware<004c
Intel Ssd 660p
Intel Optane Ssd 905p Firmware<e2010480
Intel Optane Ssd 905p
Intel Optane Ssd 900p Firmware<e2010480
Intel Optane Ssd 900p
Intel Ssd Dc P4510 Firmware<vdv10170
Intel Ssd Dc P4510
Intel Ssd Dc P4610 Firmware<vdv10170
Intel Ssd Dc P4610
Intel Ssd Dc P4800x Firmware<e2010485
Intel Ssd Dc P4800x
Intel Ssd Dc P4801x Firmware<e2010485
Intel Ssd Dc P4801x
Intel Ssd Dc P4101 Firmware<008d
Intel Ssd Dc P4101
Intel Ssd Pro 5450s Firmware<lhf0b3p
Intel Ssd E 5100s Firmware<lhf0ae3
Intel Ssd Pro 5400s Firmware<lsf043p

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Frequently Asked Questions

  • What is the vulnerability ID for this issue?

    The vulnerability ID for this issue is CVE-2020-12310.

  • What is the severity level of CVE-2020-12310?

    The severity level of CVE-2020-12310 is medium, with a severity value of 4.6.

  • Which Intel SSD models are affected by this vulnerability?

    The vulnerability affects some Intel Client SSDs and some Intel Data Center SSDs.

  • Is physical access required to exploit CVE-2020-12310?

    Yes, an unauthenticated user would need physical access to potentially enable information disclosure.

  • Where can I find more information about CVE-2020-12310?

    You can find more information about CVE-2020-12310 on the Intel Security Center advisory page: [https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00362]

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203