VULNERABILITY INTELLIGENCE
CVE-2020-12309
CVSS score4.6 MEDIUM
EPSS probability0.33%
CISA KEVNot currently listed
Published2020-11-12
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Description
Insufficiently protected credentialsin subsystem in some Intel(R) Client SSDs and some Intel(R) Data Center SSDs may allow an unauthenticated user to potentially enable information disclosure via physical access.
Weakness classification
- nvd@nist.gov: CWE-522
Primary references
- secure@intel.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory