CVE-2023-24588 MEDIUM

CVE-2023-24588

Vendor N/A
Product Intel(R) Optane(TM) SSD products
Weakness CWE-200 · Info exposure
Published November 14, 2023
Last update October 11, 2024
View on NVD All CVEs

CVSS base score

5.9/10
Attack vector Physical
Attack complexity Low
Privileges required None
User interaction Required
Confidentiality High
Integrity Low

CVSS vector

CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N

What the vulnerability does

01Description

Exposure of sensitive information to an unauthorized actor in firmware for some Intel(R) Optane(TM) SSD products may allow an unauthenticated user to potentially enable information disclosure via physical access.

Key dates

02Disclosure timeline

November 14, 2023 CVE published
October 11, 2024 Record updated