What is the CVSS score of CVE-2021-0148?

CVE-2021-0148 has a CVSS 3.1 base score of 4.4 (Medium). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N. EPSS exploitation probability: 0.2%.

Ssd Dc D4512 Firmware CVE-2021-0148

MEDIUM

Insertion of Sensitive Information into Log File (CWE-532)

2021-11-17 secure@intel.com

Intel Information Disclosure Ssd Dc D4512 Firmware Ssd Dc P4510 U 2 Firmware Ssd Dc P4510 Edsff Firmware Ssd Dc P4511 Edsff Firmware Ssd Dc P4511 M 2 Firmware Ssd Dc P4610 U 2 Firmware Ssd Dc P4618 Firmware Ssd D S4510 Firmware Ssd D7 P5608 Firmware Ssd D7 P5500 Firmware Ssd D7 P5600 Firmware Ssd D5 P4320 Firmware Ssd D5 P4420 Firmware Ssd D5 P4326 Firmware Ssd Dc P4500 Firmware Ssd Dc P4501 Firmware Ssd Dc P4600 Firmware Ssd Dc P4608 Firmware

4.4

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

4.4 MEDIUM

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Attack Vector

Local

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Lifecycle Timeline

CVE Published

Nov 17, 2021 - 20:15 nvd

MEDIUM 4.4

DescriptionNVD

Insertion of information into log file in firmware for some Intel(R) SSD DC may allow a privileged user to potentially enable information disclosure via local access.

AnalysisAI

Insertion of information into log file in firmware for some Intel(R) SSD DC may allow a privileged user to potentially enable information disclosure via local access. Rated medium severity (CVSS 4.4), this vulnerability is low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-532. Insertion of information into log file in firmware for some Intel(R) SSD DC may allow a privileged user to potentially enable information disclosure via local access. Affected products include: Intel Ssd Dc D4512 Firmware, Intel Ssd Dc P4510 U.2 Firmware, Intel Ssd Dc P4510 Edsff Firmware, Intel Ssd Dc P4511 Edsff Firmware, Intel Ssd Dc P4511 M.2 Firmware.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.