← Back

CVE-2023-24587

nvd nist
Published: Nov 14, 2023Modified: Jun 17, 2026

JSON object

Loading...
4.4
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Exploitability: 0.8 / Impact: 3.6
Source: NVD

Description

Insufficient control flow management in firmware for some Intel(R) Optane(TM) SSD products may allow a privileged user to potentially enable denial of service via local access.

Affected (5)

Intel
5 products
Optane Memory H20 With Solid State Storage Firmware
Optane Ssd 900p Firmware
Optane Ssd Dc P4800x Firmware
Optane Ssd Dc P4801x Firmware
Optane Ssd 905p Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Optane Memory H20 With Solid State Storage Firmware
Before u4110553-g004
Running on/withPlatform Versions
Intel
Optane Memory H20 With Solid State Storage
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Optane Ssd 900p Firmware
Before e2010650
Running on/withPlatform Versions
Intel
Optane Ssd 900p
All versions
Configuration C
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Optane Ssd Dc P4800x Firmware
Before e2010650
Running on/withPlatform Versions
Intel
Optane Ssd Dc P4800x
All versions
Configuration D
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Optane Ssd Dc P4801x Firmware
Before e2010650
Running on/withPlatform Versions
Intel
Optane Ssd Dc P4801x
All versions
Configuration E
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Optane Ssd 905p Firmware
Before e2010650
Running on/withPlatform Versions
Intel
Optane Ssd 905p
All versions

Related CWEs

CWE-691
Insufficient Control Flow Management
The code does not sufficiently manage its control flow during execution, creating conditions in which the control flow can be modified in unexpected ways.

References (2)

Source: secure@intel.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.