CVSS 3.0
6.8 mediumCVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCVE-2018-18095
Improper authentication in firmware for Intel(R) SSD DC S4500 Series and Intel(R) SSD DC S4600 Series before SCV10150 may allow an unprivileged user to potentially enable escalation of privilege via physical access.
Severity
- EPSS
- 0.5% chance of exploitation in the next 30 days; higher than 43% of CVEs (scores of 2026-10-31)
- CWE
- CWE-287
- Published
- Modified
- Record from
- the NVD, synced
Affected
- intel:ssd_dc_s4500_firmware
- intel:ssd_dc_s4600_firmware
References
- http://www.securityfocus.com/bid/109103
- https://support.f5.com/csp/article/K62655863
- https://support.f5.com/csp/article/K62655863?utm_source=f5support&%3Butm_medium=RSS
- https://support.lenovo.com/us/en/product_security/LEN-28116
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00267.html