Skip to content
Fencer Vulns
medium 4.6

CVE-2020-12309 json

Insufficiently protected credentialsin subsystem in some Intel(R) Client SSDs and some Intel(R) Data Center SSDs may allow an unauthenticat…

published 2020-11-12 5 y ago modified 2026-06-17 4 mo ago also EUVD-2020-4621

cvss
4.6
version 3.1, NVD
cisa kev
Not listed
not in CISA's catalog
epss
0.3%
EPSS 0.3% chance of exploitation in 30 days, percentile 26%
public exploits
0
none known

Summary

Insufficiently protected credentialsin subsystem in some Intel(R) Client SSDs and some Intel(R) Data Center SSDs may allow an unauthenticated user to potentially enable information disclosure via physical access.

Patch / fix

  • intel ssd_pro_6000p_firmware psf131p
  • intel ssd_pro_5450s_firmware lhf0b3p, lhf005p
  • intel ssd_e_5100s_firmware lhf0ae3, lhf004e
  • intel ssd_pro_5400s_firmware lbf017p, lsf043p
  • intel ssd_pro_7600p_firmware 005p
  • intel ssd_760p_firmware 005c
  • intel ssd_e_6100p_firmware 005e
  • intel ssd_660p_firmware 004c
  • intel optane_ssd_905p_firmware e2010480
  • intel optane_ssd_900p_firmware e2010480
  • intel ssd_dc_p4510_firmware vdv10170
  • intel ssd_dc_p4610_firmware vdv10170
  • intel ssd_dc_p4800x_firmware e2010485
  • intel ssd_dc_p4801x_firmware e2010485
  • intel ssd_dc_p4101_firmware 008d

Exploit prediction

0.33% chance of exploitation in the next 30 days, higher than 26% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
NVD 3.1 4.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
NVD 2.0 2.1 AV:L/AC:L/Au:N/C:P/I:N/A:N

Affected products

  • n/a Intel(R) Client SSDs and some Intel(R) Data Center SSDs

Classification

Weakness
  • CWE-522 Insufficiently Protected Credentials

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.