What’s Vulnerable › Vulnerabilities

CVE-2020-12311

• Severity: medium (CVSS 4.6 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-11-12 · updated 2026-06-17

Description

Insufficient control flow managementin firmware in some Intel(R) Client SSDs and some Intel(R) Data Center SSDs may allow an unauthenticated user to potentially enable information disclosure via physical access.

Affected products

• Intel Optane Ssd 900P Firmware: before e2010480 — fixed in e2010480
• Intel Optane Ssd 905P Firmware: before e2010480 — fixed in e2010480
• Intel Ssd 660P Firmware: before 004c — fixed in 004c
• Intel Ssd 760P Firmware: before 005c — fixed in 005c
• Intel Ssd Dc P4101 Firmware: before 008d — fixed in 008d
• Intel Ssd Dc P4510 Firmware: before vdv10170 — fixed in vdv10170
• Intel Ssd Dc P4610 Firmware: before vdv10170 — fixed in vdv10170
• Intel Ssd Dc P4800X Firmware: before e2010485 — fixed in e2010485
• Intel Ssd Dc P4801X Firmware: before e2010485 — fixed in e2010485
• Intel Ssd E 5100S Firmware: before lhf004e; before lhf0ae3 — fixed in lhf004e, lhf0ae3
• Intel Ssd E 6100P Firmware: before 005e — fixed in 005e
• Intel Ssd Pro 5400S Firmware: before lbf017p; before lsf043p — fixed in lbf017p, lsf043p
• Intel Ssd Pro 5450S Firmware: before lhf005p; before lhf0b3p — fixed in lhf005p, lhf0b3p
• Intel Ssd Pro 6000P Firmware: before psf131p — fixed in psf131p
• Intel Ssd Pro 7600P Firmware: before 005p — fixed in 005p

How to fix

Upgrade to a fixed version: Intel Optane Ssd 900P Firmware e2010480; Intel Optane Ssd 905P Firmware e2010480; Intel Ssd 660P Firmware 004c; Intel Ssd 760P Firmware 005c; Intel Ssd Dc P4101 Firmware 008d; Intel Ssd Dc P4510 Firmware vdv10170; Intel Ssd Dc P4610 Firmware vdv10170; Intel Ssd Dc P4800X Firmware e2010485; Intel Ssd Dc P4801X Firmware e2010485; Intel Ssd E 5100S Firmware lhf004e, lhf0ae3; Intel Ssd E 6100P Firmware 005e; Intel Ssd Pro 5400S Firmware lbf017p, lsf043p. Check the vendor advisory for mitigations.

References

• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00362
• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00362

Get alerted when CVE-2020-12311 or the next vulnerability affects your stack