Vulnerability · Published Nov 7, 2025 · Assigned by Solidigm
CVE-2025-12896
Medium 4.4
In plain English
A medium-severity security flaw in D5-P5316, D7-P5510, D7-P5520/D7-P5620, D5-P5430, D5-P5336 from Solidigm™. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 3% of all known vulnerabilities).
Severity (CVSS 3.1)4.4Medium
Exploit odds (30 days)0.1%top 97.4% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Improper resource management in firmware of some Solidigm DC Products may allow an attacker with local or physical access to gain un-authorized access to a locked storage device.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Solidigm™ | D5-P5316, D7-P5510, D7-P5520/D7-P5620, D5-P5430, D5-P5336 | All FW prior to ACV10360All FW prior to JCV10501All FW prior to 9CV10490All FW prior to 6DV10341 (8K IU) / 6CV10241 (4K IU)All FW prior to 5CV10326 |
Weakness: CWE-307 · Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N