What’s Vulnerable › Vulnerabilities

CVE-2023-24588

• Severity: medium (CVSS 4.6 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-11-14 · updated 2026-06-17
• Weakness: CWE-200

Description

Exposure of sensitive information to an unauthorized actor in firmware for some Intel(R) Optane(TM) SSD products may allow an unauthenticated user to potentially enable information disclosure via physical access.

Affected products

• Intel Optane Memory H20 With Solid State Storage Firmware: before u4110553-g004 — fixed in u4110553-g004
• Intel Optane Ssd 900P Firmware: before e2010650 — fixed in e2010650
• Intel Optane Ssd 905P Firmware: before e2010650 — fixed in e2010650
• Intel Corporation Intel(R) Optane(TM) SSD DC P4800X: before e2010650 — fixed in e2010650
• Intel Optane Ssd Dc P4801X Firmware: before e2010650 — fixed in e2010650

How to fix

Upgrade to a fixed version: Intel Optane Memory H20 With Solid State Storage Firmware u4110553-g004; Intel Optane Ssd 900P Firmware e2010650; Intel Optane Ssd 905P Firmware e2010650; Intel Corporation Intel(R) Optane(TM) SSD DC P4800X e2010650; Intel Optane Ssd Dc P4801X Firmware e2010650. Check the vendor advisory for mitigations.

References

• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00758.html
• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00758.html

Get alerted when CVE-2023-24588 or the next vulnerability affects your stack