Insufficient Control Flow Management in Intel Client and Data Center SSDs
CVE-2020-12311

4.6MEDIUM

Key Information:

Vendor

Intel
Status
Intel(r) Client Ssds And Some Intel(r) Data Center Ssds
Vendor
CVE Published:
12 November 2020

What is CVE-2020-12311?

A flaw in the firmware of specific Intel Client SSDs and Intel Data Center SSDs allows an unauthenticated user with physical access to the device to potentially expose sensitive information. This vulnerability stems from inadequate control flow management, which can be exploited to bypass security measures.

Affected Version(s)

Intel(R) Client SSDs and some Intel(R) Data Center SSDs See references

References

https://www.intel.com/content/www/us/en/security-center/a...
x_refsource_MISC

CVSS V3.1

Score:
4.6
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Physical
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.