What’s Vulnerable › Vulnerabilities

CVE-2018-18095

• Severity: medium (CVSS 6.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-07-11 · updated 2026-06-17
• Weakness: CWE-287

Description

Improper authentication in firmware for Intel(R) SSD DC S4500 Series and Intel(R) SSD DC S4600 Series before SCV10150 may allow an unprivileged user to potentially enable escalation of privilege via physical access.

Affected products

• Intel Ssd Dc S4500 Firmware: before scv10150 — fixed in scv10150
• Intel Ssd Dc S4600 Firmware: before scv10150 — fixed in scv10150

How to fix

Upgrade to a fixed version: Intel Ssd Dc S4500 Firmware scv10150; Intel Ssd Dc S4600 Firmware scv10150. Check the vendor advisory for mitigations.

References

• http://www.securityfocus.com/bid/109103
• https://support.f5.com/csp/article/K62655863
• https://support.f5.com/csp/article/K62655863?utm_source=f5support&amp%3Butm_medium=RSS
• https://support.lenovo.com/us/en/product_security/LEN-28116
• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00267.html
• http://www.securityfocus.com/bid/109103
• https://support.f5.com/csp/article/K62655863
• https://support.f5.com/csp/article/K62655863?utm_source=f5support&amp%3Butm_medium=RSS
• https://support.lenovo.com/us/en/product_security/LEN-28116
• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00267.html

Get alerted when CVE-2018-18095 or the next vulnerability affects your stack