Improper Access Control in Intel Optane SSD Firmware
CVE-2023-27879

4.6MEDIUM

Key Information:

Vendor

Intel
Status
Intel(R) Optane(TM) SSD products
Vendor
CVE Published:
14 November 2023

What is CVE-2023-27879?

An improper access control vulnerability in the firmware of select Intel Optane SSD products could permit an unauthorized user to access sensitive information through physical interaction with the device. This could lead to potential information disclosure, highlighting the importance of safeguarding these devices from unauthorized physical access.

Affected Version(s)

Intel(R) Optane(TM) SSD products See references

References

https://www.intel.com/content/www/us/en/security-center/a...

CVSS V3.1

Score:
4.6
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Physical
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.