MEDIUM · 6.9

CVE-2023-24587

Insufficient control flow management in firmware for some Intel(R) Optane(TM) SSD products may allow a privileged user to potentially enable denial of service via local access.

Vulnerability Description

Insufficient control flow management in firmware for some Intel(R) Optane(TM) SSD products may allow a privileged user to potentially enable denial of service via local access.

CVSS Score

6.9

MEDIUM

CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:N/I:H/A:H
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality
NONE
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
IntelOptane Memory H20 With Solid State Storage Firmware< u4110553-g004
IntelOptane Memory H20 With Solid State Storage-
IntelOptane Ssd 900P Firmware< e2010650
IntelOptane Ssd 900P-
IntelOptane Ssd Dc P4800X Firmware< e2010650
IntelOptane Ssd Dc P4800X-
IntelOptane Ssd Dc P4801X Firmware< e2010650
IntelOptane Ssd Dc P4801X-
IntelOptane Ssd 905P Firmware< e2010650
IntelOptane Ssd 905P-

Related Weaknesses (CWE)

References

FAQ

What is CVE-2023-24587?

CVE-2023-24587 is a vulnerability with a CVSS score of 6.9 (MEDIUM). Insufficient control flow management in firmware for some Intel(R) Optane(TM) SSD products may allow a privileged user to potentially enable denial of service via local access.

How severe is CVE-2023-24587?

CVE-2023-24587 has been rated MEDIUM with a CVSS base score of 6.9/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2023-24587?

Check the references section above for vendor advisories and patch information. Affected products include: Intel Optane Memory H20 With Solid State Storage Firmware, Intel Optane Memory H20 With Solid State Storage, Intel Optane Ssd 900P Firmware, Intel Optane Ssd 900P, Intel Optane Ssd Dc P4800X Firmware.