What is CVE-2020-12311?

CVE-2020-12311 is a medium-severity vulnerability in Intel Optane_ssd_900p. CVSS score: 4.6/10. Published 2020-11-12.

How severe is CVE-2020-12311?

Medium severity. CVSS v3 base score is 4.6 out of 10.

Vulnerability in Intel Optane_ssd_900p

CVE-2020-12311

Insufficient control flow managementin firmware in some Intel(R) Client SSDs and some Intel(R) Data Center SSDs may allow an unauthenticated user to potentially enable information disclosure via physical access.

EPSS: 0.004 (27.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.6 (Medium). Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.

Affected products

Intel Optane_ssd_900p
Intel Optane_ssd_900p_firmware
Intel Optane_ssd_905p
Intel Optane_ssd_905p_firmware
Intel Ssd_660p
Intel Ssd_660p_firmware
Intel Ssd_760p
Intel Ssd_760p_firmware
Intel Ssd_dc_p4101
Intel Ssd_dc_p4101_firmware

References

secure@intel.com (x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2020-12311?: CVE-2020-12311 is a medium-severity vulnerability in Intel Optane_ssd_900p. CVSS score: 4.6/10. Published 2020-11-12.
How severe is CVE-2020-12311?: Medium severity. CVSS v3 base score is 4.6 out of 10.