CVE-2020-12311: Intel Optane Ssd 900p Firmware

Medium severity, CVSS 4.6. EPSS: 0.4% chance of exploitation in the next 30 days.

Insufficient control flow managementin firmware in some Intel(R) Client SSDs and some Intel(R) Data Center SSDs may allow an unauthenticated user to potentially enable information disclosure via physical access.

Affected products

• Intel Optane Ssd 900p Firmware: before e2010480 (fixed in e2010480)
• Intel Optane Ssd 905p Firmware: before e2010480 (fixed in e2010480)
• Intel Ssd 660p Firmware: before 004c (fixed in 004c)
• Intel Ssd 760p Firmware: before 005c (fixed in 005c)
• Intel Ssd DC p4101 Firmware: before 008d (fixed in 008d)
• Intel Ssd DC p4510 Firmware: before vdv10170 (fixed in vdv10170)
• Intel Ssd DC p4610 Firmware: before vdv10170 (fixed in vdv10170)
• Intel Ssd DC p4800x Firmware: before e2010485 (fixed in e2010485)
• Intel Ssd DC p4801x Firmware: before e2010485 (fixed in e2010485)
• Intel Ssd E 5100s Firmware: before lhf004e (fixed in lhf004e); before lhf0ae3 (fixed in lhf0ae3)
• Intel Ssd E 6100p Firmware: before 005e (fixed in 005e)
• Intel Ssd Pro 5400s Firmware: before lbf017p (fixed in lbf017p); before lsf043p (fixed in lsf043p)
• Intel Ssd Pro 5450s Firmware: before lhf005p (fixed in lhf005p); before lhf0b3p (fixed in lhf0b3p)
• Intel Ssd Pro 6000p Firmware: before psf131p (fixed in psf131p)
• Intel Ssd Pro 7600p Firmware: before 005p (fixed in 005p)

Published 2020-11-12. Last modified 2026-06-17.