Medium severity · published Nov 17, 2021
CVE-2021-0148
Insertion of information into log file in firmware for some Intel(R) SSD DC may allow a privileged user to potentially enable information disclosure via local access
4.4
CVSS
0.2%
EPSS
No
On KEV
Description
Insertion of information into log file in firmware for some Intel(R) SSD DC may allow a privileged user to potentially enable information disclosure via local access.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Attack vector
Local
Complexity
Low
Privileges
High
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 16% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SD
Ssd D-s4510 Firmware · Intel
before xcv10140 · source: NVD
SD
Ssd D5-p4320 Firmware · Intel
All versions, or not specified · source: NVD
SD
Ssd D5-p4326 Firmware · Intel
All versions, or not specified · source: NVD
SD
Ssd D5-p4420 Firmware · Intel
All versions, or not specified · source: NVD
SD
Ssd D7-p5500 Firmware · Intel
before 1.2.0; before 2cv1c030; before 2cv1r106; before 2cv1l029 · source: NVD
SD
Ssd D7-p5600 Firmware · Intel
before 1.2.0; before 2cv1l029; before 2cv1c030 · source: NVD
SD
Ssd D7-p5608 Firmware · Intel
before 2cv1r106 · source: NVD
SD
Ssd DC D4512 Firmware · Intel
before et10 · source: NVD
SD
Ssd DC P4500 Firmware · Intel
All versions, or not specified · source: NVD
SD
Ssd DC P4501 Firmware · Intel
All versions, or not specified · source: NVD
SD
Ssd DC P4510 Edsff Firmware · Intel
before vdv10284 · source: NVD
SD
Ssd DC P4510 U.2 Firmware · Intel
before vdv10182 · source: NVD