Medium severity · published Nov 12, 2020
CVE-2020-0584
Buffer overflow in firmware for Intel(R) SSD DC P4800X and P4801X Series, Intel(R) Optane(TM) SSD 900P and 905P Series may allow an unauthenticated user to potentially enable a…
6.2
CVSS
0.3%
EPSS
No
On KEV
Description
Buffer overflow in firmware for Intel(R) SSD DC P4800X and P4801X Series, Intel(R) Optane(TM) SSD 900P and 905P Series may allow an unauthenticated user to potentially enable a denial of service via local access.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack vector
Local
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 24% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OS
Optane Ssd 900p Firmware · Intel
before e2010480 · source: NVD
OS
Optane Ssd 905p Firmware · Intel
before e2010480 · source: NVD
SD
Ssd DC P4800x Firmware · Intel
before e2010485 · source: NVD
SD
Ssd DC P4801x Firmware · Intel
before e2010485 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2020-0584
CVE.org
https://www.cve.org/CVERecord?id=CVE-2020-0584
Patch
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00362
More from Optane Ssd 900p Firmware
7.8
CVE-2023-27519
Improper input validation in firmware for some Intel(R) Optane(TM) SSD products may allow a privileged user to potentially enable escalation of privilege via local access
6.8
CVE-2021-33080
Exposure of sensitive system information due to uncleared debug information in firmware for some Intel(R) SSD DC, Intel(R) Optane(TM) SSD and Intel(R) Optane(TM) SSD DC Products…
6.8
CVE-2021-33077
Insufficient control flow management in firmware for some Intel(R) SSD, Intel(R) Optane(TM) SSD and Intel(R) SSD DC Products may allow an unauthenticated user to potentially…
5.5
CVE-2023-27306
Improper Initialization in firmware for some Intel(R) Optane(TM) SSD products may allow an authenticated user to potentially enable denial of service via local access
5.5
CVE-2021-33069
Improper resource shutdown or release in firmware for some Intel(R) SSD, Intel(R) SSD DC, Intel(R) Optane(TM) SSD and Intel(R) Optane(TM) SSD DC may allow a privileged user to…