CVE-2023-24588

MEDIUM

Intel Optane SSD Firmware - Unauthenticated Information Disclosure via Physical Access

Title source: llm

Description

Exposure of sensitive information to an unauthorized actor in firmware for some Intel(R) Optane(TM) SSD products may allow an unauthenticated user to potentially enable information disclosure via physical access.

References (1)

Core 1

Core References

Vendor Advisory

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00758.html

Scores

CVSS v3 5.9

EPSS 0.0013

EPSS Percentile 32.1%

Attack Vector PHYSICAL

CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-200

Status published

Products (5)

intel/optane_memory_h20_with_solid_state_storage_firmware < u4110553-g004

intel/optane_ssd_900p_firmware < e2010650

intel/optane_ssd_905p_firmware < e2010650

intel/optane_ssd_dc_p4800x_firmware < e2010650

intel/optane_ssd_dc_p4801x_firmware < e2010650

Published Nov 14, 2023

Tracked Since Feb 18, 2026