← Back

CVE-2023-27519

nvd nist
Published: Nov 14, 2023Modified: Jun 17, 2026

JSON object

Loading...
7.8
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: NVD

Description

Improper input validation in firmware for some Intel(R) Optane(TM) SSD products may allow a privileged user to potentially enable escalation of privilege via local access.

Affected (5)

Intel
5 products
Optane Memory H20 With Solid State Storage Firmware
Optane Ssd 900p Firmware
Optane Ssd Dc P4800x Firmware
Optane Ssd Dc P4801x Firmware
Optane Ssd 905p Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Optane Memory H20 With Solid State Storage Firmware
Before u4110553-g004
Running on/withPlatform Versions
Intel
Optane Memory H20 With Solid State Storage
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Optane Ssd 900p Firmware
Before e2010650
Running on/withPlatform Versions
Intel
Optane Ssd 900p
All versions
Configuration C
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Optane Ssd Dc P4800x Firmware
Before e2010650
Running on/withPlatform Versions
Intel
Optane Ssd Dc P4800x
All versions
Configuration D
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Optane Ssd Dc P4801x Firmware
Before e2010650
Running on/withPlatform Versions
Intel
Optane Ssd Dc P4801x
All versions
Configuration E
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Optane Ssd 905p Firmware
Before e2010650
Running on/withPlatform Versions
Intel
Optane Ssd 905p
All versions

Related CWEs

CWE-20
Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (2)

Source: secure@intel.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.