MEDIUM · 6.8

CVE-2023-27879

Improper access control in firmware for some Intel(R) Optane(TM) SSD products may allow an unauthenticated user to potentially enable information disclosure via physical access.

Vulnerability Description

Improper access control in firmware for some Intel(R) Optane(TM) SSD products may allow an unauthenticated user to potentially enable information disclosure via physical access.

CVSS Score

6.8

MEDIUM

CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
Attack Vector
PHYSICAL
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
NONE

Affected Products

VendorProductVersions
IntelOptane Memory H20 With Solid State Storage Firmware< u4110553-g004
IntelOptane Memory H20 With Solid State Storage-
IntelOptane Ssd 905P Firmware< e2010650
IntelOptane Ssd 905P-
IntelOptane Ssd Dc P4800X Firmware< e2010650
IntelOptane Ssd Dc P4800X-
IntelOptane Ssd Dc P4801X Firmware< e2010650
IntelOptane Ssd Dc P4801X-

Related Weaknesses (CWE)

References

FAQ

What is CVE-2023-27879?

CVE-2023-27879 is a vulnerability with a CVSS score of 6.8 (MEDIUM). Improper access control in firmware for some Intel(R) Optane(TM) SSD products may allow an unauthenticated user to potentially enable information disclosure via physical access.

How severe is CVE-2023-27879?

CVE-2023-27879 has been rated MEDIUM with a CVSS base score of 6.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2023-27879?

Check the references section above for vendor advisories and patch information. Affected products include: Intel Optane Memory H20 With Solid State Storage Firmware, Intel Optane Memory H20 With Solid State Storage, Intel Optane Ssd 905P Firmware, Intel Optane Ssd 905P, Intel Optane Ssd Dc P4800X Firmware.