Vulnerability · Published Nov 12, 2020 · Assigned by intel
CVE-2020-12309
Medium 4.6
In plain English
A medium-severity security flaw in Intel(R) Client SSDs and some Intel(R) Data Center SSDs. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 27% of all known vulnerabilities).
Severity (CVSS NVD)4.6Medium
Exploit odds (30 days)0.3%top 73.2% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
Insufficiently protected credentialsin subsystem in some Intel(R) Client SSDs and some Intel(R) Data Center SSDs may allow an unauthenticated user to potentially enable information disclosure via physical access.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | Intel(R) Client SSDs and some Intel(R) Data Center SSDs | See references |