Potential Security Vulnerability in Intel Data Center SSD Products

From Intel Corp.

A potential security vulnerability in Intel SSD products may allow information disclosure. Intel is releasing firmware updates to mitigate this potential vulnerability.

Click to enlarge

Vulnerability details:
CVE ID: CVE-2020-0527
Description: Insufficient control flow management in firmware for some Intel Data Center SSDs may allow a privileged user to potentially enable information disclosure via local access.

CVSS Base Score: 7.9 High

CVSS Vector: CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N

Affected products:

Intel SSD D3-S4510 Series
Intel SSD DC P4510 Series
Intel SSD DC P4610 Series
Intel SSD DC P4618 Series
Intel SSD DC P4511 Series

Recommendations:
Intel recommends updating Intel SSD products to the latest firmware (see table).

Intel Ssd Advisory Tabl2

Updates are available for download .

Acknowledgements:
The issue was found internally by Intel.
Intel, and nearly the entire technology industry, follows a disclosure practice called Coordinated Disclosure, under which a cybersecurity vulnerability is generally publicly disclosed only after mitigations are available.

Revision history

Click to enlarge

Legal Notices and Disclaimers
Intel provides these materials as-is, with no express or implied warranties.
All products, dates, and figures specified are preliminary based on current expectations, and are subject to change without notice.
Intel, processors, chipsets, and desktop boards may contain design defects or errors known as errata, which may cause the product to deviate from published specifications. Current characterized errata are available on request.
Intel technologies’ features and benefits depend on system configuration and may require enabled hardware, software or service activation. Performance varies depending on system configuration. No computer system can be absolutely secure. Check with your system manufacturer or retailer or learn more at the company website.
Some results have been estimated or simulated using internal Intel analysis or architecture simulation or modeling, and provided to you for informational purposes. Any differences in your system hardware, software or configuration may affect your actual performance.