What’s Vulnerable › Vulnerabilities

CVE-2020-0527

• Severity: medium (CVSS 4.4 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-06-15 · updated 2026-06-17

Description

Insufficient control flow management in firmware for some Intel(R) Data Center SSDs may allow a privileged user to potentially enable information disclosure via local access.

Affected products

• Intel Ssd D3-S4510 Firmware: before xc311120 — fixed in xc311120
• Intel Ssd Dc P4510 Firmware: before vdv10170 — fixed in vdv10170
• Intel Ssd Dc P4511 Firmware: before vcv10370 — fixed in vcv10370
• Intel Ssd Dc P4610 Firmware: before vdv10170 — fixed in vdv10170
• Intel Ssd Dc P4618 Firmware: before vdv10170 — fixed in vdv10170

How to fix

Upgrade to a fixed version: Intel Ssd D3-S4510 Firmware xc311120; Intel Ssd Dc P4510 Firmware vdv10170; Intel Ssd Dc P4511 Firmware vcv10370; Intel Ssd Dc P4610 Firmware vdv10170; Intel Ssd Dc P4618 Firmware vdv10170. Check the vendor advisory for mitigations.

References

• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00266.html
• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00266.html

Get alerted when CVE-2020-0527 or the next vulnerability affects your stack