PT-2020-4676 · Intel · Intel Optane Ssd 900P+3

Published 2020-11-10 · Updated 2020-11-19 · CVE-2020-0584

Positive Technologies (AI Summary)

CVSS v3.1

6.2

Medium

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Intel SSD DC P4800X and P4801X Series versions (affected versions not specified) Intel Optane SSD 900P and 905P Series versions (affected versions not specified)

Description The issue is related to errors in resource release and buffer overflow in the firmware of Intel SSDs, which may allow an unauthenticated user to potentially enable a denial of service via local access.

Recommendations For Intel SSD DC P4800X and P4801X Series, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For Intel Optane SSD 900P and 905P Series, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Improper Resource Release

Weakness Enumeration

CWE-120

CWE-404

Related Identifiers

BDU:2020-05228

CVE-2020-0584

Affected Products

Intel Optane Ssd 900P

Intel Optane Ssd 905P

Intel Ssd Dc P4800X

Intel Ssd Dc P4801X

References · 6

• https://osv.dev/vulnerability/CVE-2020-0584 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-0584 · Security Note
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00362 · Vendor Advisory
• https://bdu.fstec.ru/vul/2020-05228 · Security Note
• https://vuldb.com/?id.164792 · Note
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00362.html · Note