CVE-2021-0148

Published: Nov 17, 2021Modified: Nov 21, 2024

4.4

Vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Exploitability: 0.8 / Impact: 3.6

Source: NVD

Description

Insertion of information into log file in firmware for some Intel(R) SSD DC may allow a privileged user to potentially enable information disclosure via local access.

Affected (23)

Products: Intel: Ssd Dc D4512 Firmware, Ssd Dc P4510 U.2 Firmware, Ssd Dc P4510 Edsff Firmware, Ssd Dc P4511 Edsff Firmware, Ssd Dc P4511 M.2 Firmware, Ssd Dc P4610 U.2 Firmware, Ssd Dc P4618 Firmware, Ssd D S4510 Firmware, Ssd D7 P5608 Firmware, Ssd D7 P5500 Firmware, Ssd D7 P5600 Firmware, Ssd D5 P4320 Firmware, Ssd D5 P4420 Firmware, Ssd D5 P4326 Firmware, Ssd Dc P4500 Firmware, Ssd Dc P4501 Firmware, Ssd Dc P4600 Firmware, Ssd Dc P4608 Firmware

Intel

18 products

Ssd Dc D4512 Firmware

Ssd Dc P4510 U.2 Firmware

Ssd Dc P4510 Edsff Firmware

Ssd Dc P4511 Edsff Firmware

Ssd Dc P4511 M.2 Firmware

Ssd Dc P4610 U.2 Firmware

Ssd Dc P4618 Firmware

Ssd D S4510 Firmware

Ssd D7 P5608 Firmware

Ssd D7 P5500 Firmware

Ssd D7 P5600 Firmware

Ssd D5 P4320 Firmware

Ssd D5 P4420 Firmware

Ssd D5 P4326 Firmware

Ssd Dc P4500 Firmware

Ssd Dc P4501 Firmware

Ssd Dc P4600 Firmware

Ssd Dc P4608 Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Ssd Dc D4512 Firmware	Before et10

Running on/with	Platform Versions
Intel Ssd Dc D4512	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Ssd Dc P4510 U.2 Firmware	Before vdv10182

Running on/with	Platform Versions
Intel Ssd Dc P4510 U.2	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Ssd Dc P4510 Edsff Firmware	Before vdv10284

Running on/with	Platform Versions
Intel Ssd Dc P4510 Edsff	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Ssd Dc P4511 Edsff Firmware	Before vdv10284

Running on/with	Platform Versions
Intel Ssd Dc P4511 Edsff	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Ssd Dc P4511 M.2 Firmware	Before vdv10384

Running on/with	Platform Versions
Intel Ssd Dc P4511 M.2	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Ssd Dc P4610 U.2 Firmware	Before vdv10182

Running on/with	Platform Versions
Intel Ssd Dc P4610 U.2	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Ssd Dc P4618 Firmware	Before vdv10182

Running on/with	Platform Versions
Intel Ssd Dc P4618	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Ssd D S4510 Firmware	Before xcv10140

Running on/with	Platform Versions
Intel Ssd D S4510	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Ssd D7 P5608 Firmware	Before 2cv1r106

Running on/with	Platform Versions
Intel Ssd D7 P5608	All versions

Configuration J

1 vulnerable

Vulnerable Software	Affected Versions
Intel Ssd D7 P5500 Firmware	Before 1.2.0

Configuration K

1 vulnerable

Vulnerable Software	Affected Versions
Intel Ssd D7 P5600 Firmware	Before 1.2.0

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Ssd D5 P4320 Firmware	All versions

Running on/with	Platform Versions
Intel Ssd D5 P4320	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Ssd D5 P4420 Firmware	All versions

Running on/with	Platform Versions
Intel Ssd D5 P4420	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Ssd D5 P4326 Firmware	All versions

Running on/with	Platform Versions
Intel Ssd D5 P4326	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Ssd Dc P4500 Firmware	All versions

Running on/with	Platform Versions
Intel Ssd Dc P4500	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Ssd Dc P4501 Firmware	All versions

Running on/with	Platform Versions
Intel Ssd Dc P4501	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Ssd Dc P4600 Firmware	All versions

Running on/with	Platform Versions
Intel Ssd Dc P4600	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Ssd Dc P4608 Firmware	All versions

Running on/with	Platform Versions
Intel Ssd Dc P4608	All versions

Configuration S

1 vulnerable

Vulnerable Software	Affected Versions
Intel Ssd D7 P5500 Firmware	Before 2cv1c030

Configuration T

1 vulnerable

Vulnerable Software	Affected Versions
Intel Ssd D7 P5500 Firmware	Before 2cv1r106

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Ssd D7 P5500 Firmware	Before 2cv1l029

Running on/with	Platform Versions
Intel Ssd D7 P5500	All versions

Configuration V

1 vulnerable

Vulnerable Software	Affected Versions
Intel Ssd D7 P5600 Firmware	Before 2cv1l029

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Ssd D7 P5600 Firmware	Before 2cv1c030

Running on/with	Platform Versions
Intel Ssd D7 P5600	All versions

Related CWEs

CWE-532

Insertion of Sensitive Information into Log File

Information written to log files can be of a sensitive nature and give valuable guidance to an attacker or expose sensitive user information.

References (2)

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00535.html

Source: secure@intel.com

Vendor Advisory

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00535.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.