CVE-2025-12902

Published: Nov 7, 2025Modified: Jun 17, 2026Deferred

4.4

Vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Exploitability: 0.8 / Impact: 3.6

Source: f946a70c-00eb-42ce-8e9b-634d1f7b5a6f (Secondary)

Description

Improper resource management in firmware of some Solidigm DC Products may allow an attacker with local or physical access to gain un-authorized access to a locked Storage Device or create a Denial of Service.

Related CWEs

CWE-665

Improper Initialization

The product does not initialize or incorrectly initializes a resource, which might leave the resource in an unexpected state when it is accessed or used.

References (1)

https://www.solidigm.com/support-page/support-security.html

Source: f946a70c-00eb-42ce-8e9b-634d1f7b5a6f

Timeline

No history available yet.