Sensitive information in log files in Intel SSD DC
Priority LOW 20CWE-532Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- High
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Information disclosure
- Confidentiality · integrity · availability
- High · None · None
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-532.
Summary
Insertion of information into log file in firmware for some Intel(R) SSD DC may allow a privileged user to potentially enable information disclosure via local access.
Why it matters now
EPSS 0.0025 16th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | Intel(R) SSD DC | See references | — | No fix listed | CNA |
- Intel(R) SSD DC Vendor— Affected See references Fixed in — No fix listed CNA
CPE configurations NVD · 38
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:intel:ssd_dc_d4512_firmware:*:*:*:*:*:*:*:* | before et10 | Vulnerable | Intel |
| cpe:2.3:h:intel:ssd_dc_d4512:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:o:intel:ssd_dc_p4510_u.2_firmware:*:*:*:*:*:*:*:* | before vdv10182 | Vulnerable | Intel |
| cpe:2.3:h:intel:ssd_dc_p4510_u.2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:o:intel:ssd_dc_p4510_edsff_firmware:*:*:*:*:*:*:*:* | before vdv10284 | Vulnerable | Intel |
| cpe:2.3:h:intel:ssd_dc_p4510_edsff:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:o:intel:ssd_dc_p4511_edsff_firmware:*:*:*:*:*:*:*:* | before vdv10284 | Vulnerable | Intel |
| cpe:2.3:h:intel:ssd_dc_p4511_edsff:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:o:intel:ssd_dc_p4511_m.2_firmware:*:*:*:*:*:*:*:* | before vdv10384 | Vulnerable | Intel |
| cpe:2.3:h:intel:ssd_dc_p4511_m.2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
- cpe:2.3:o:intel:ssd_dc_d4512_firmware:*:*:*:*:*:*:*:* Versions before et10 Vulnerable ·Intel
- cpe:2.3:h:intel:ssd_dc_d4512:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:o:intel:ssd_dc_p4510_u.2_firmware:*:*:*:*:*:*:*:* Versions before vdv10182 Vulnerable ·Intel
- cpe:2.3:h:intel:ssd_dc_p4510_u.2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:o:intel:ssd_dc_p4510_edsff_firmware:*:*:*:*:*:*:*:* Versions before vdv10284 Vulnerable ·Intel
- cpe:2.3:h:intel:ssd_dc_p4510_edsff:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:o:intel:ssd_dc_p4511_edsff_firmware:*:*:*:*:*:*:*:* Versions before vdv10284 Vulnerable ·Intel
- cpe:2.3:h:intel:ssd_dc_p4511_edsff:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:o:intel:ssd_dc_p4511_m.2_firmware:*:*:*:*:*:*:*:* Versions before vdv10384 Vulnerable ·Intel
- cpe:2.3:h:intel:ssd_dc_p4511_m.2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
Show 28 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:intel:ssd_dc_p4610_u.2_firmware:*:*:*:*:*:*:*:* | before vdv10182 | Vulnerable | Intel |
| cpe:2.3:h:intel:ssd_dc_p4610_u.2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:o:intel:ssd_dc_p4618_firmware:*:*:*:*:*:*:*:* | before vdv10182 | Vulnerable | Intel |
| cpe:2.3:h:intel:ssd_dc_p4618:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:o:intel:ssd_d-s4510_firmware:*:*:*:*:*:*:*:* | before xcv10140 | Vulnerable | Intel |
| cpe:2.3:h:intel:ssd_d-s4510:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:o:intel:ssd_d7-p5608_firmware:*:*:*:*:*:*:*:* | before 2cv1r106 | Vulnerable | Intel |
| cpe:2.3:h:intel:ssd_d7-p5608:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:o:intel:ssd_d7-p5500_firmware:*:*:*:*:*:*:*:* | before 1.2.0 | Vulnerable | Intel |
| cpe:2.3:h:intel:ssd_d7-p5500:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:o:intel:ssd_d7-p5600_firmware:*:*:*:*:*:*:*:* | before 1.2.0 | Vulnerable | Intel |
| cpe:2.3:h:intel:ssd_d7-p5600:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:o:intel:ssd_d5-p4320_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Intel |
| cpe:2.3:h:intel:ssd_d5-p4320:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:o:intel:ssd_d5-p4420_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Intel |
| cpe:2.3:h:intel:ssd_d5-p4420:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:o:intel:ssd_d5-p4326_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Intel |
| cpe:2.3:h:intel:ssd_d5-p4326:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:o:intel:ssd_dc_p4500_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Intel |
| cpe:2.3:h:intel:ssd_dc_p4500:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:o:intel:ssd_dc_p4501_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Intel |
| cpe:2.3:h:intel:ssd_dc_p4501:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:o:intel:ssd_dc_p4600_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Intel |
| cpe:2.3:h:intel:ssd_dc_p4600:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:o:intel:ssd_dc_p4608_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Intel |
| cpe:2.3:h:intel:ssd_dc_p4608:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:o:intel:ssd_d7-p5500_firmware:*:*:*:*:*:*:*:* | before 2cv1c030; before 2cv1r106; before 2cv1l029 | Vulnerable | Intel |
| cpe:2.3:o:intel:ssd_d7-p5600_firmware:*:*:*:*:*:*:*:* | before 2cv1l029; before 2cv1c030 | Vulnerable | Intel |
- cpe:2.3:o:intel:ssd_dc_p4610_u.2_firmware:*:*:*:*:*:*:*:* Versions before vdv10182 Vulnerable ·Intel
- cpe:2.3:h:intel:ssd_dc_p4610_u.2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:o:intel:ssd_dc_p4618_firmware:*:*:*:*:*:*:*:* Versions before vdv10182 Vulnerable ·Intel
- cpe:2.3:h:intel:ssd_dc_p4618:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:o:intel:ssd_d-s4510_firmware:*:*:*:*:*:*:*:* Versions before xcv10140 Vulnerable ·Intel
- cpe:2.3:h:intel:ssd_d-s4510:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:o:intel:ssd_d7-p5608_firmware:*:*:*:*:*:*:*:* Versions before 2cv1r106 Vulnerable ·Intel
- cpe:2.3:h:intel:ssd_d7-p5608:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:o:intel:ssd_d7-p5500_firmware:*:*:*:*:*:*:*:* Versions before 1.2.0 Vulnerable ·Intel
- cpe:2.3:h:intel:ssd_d7-p5500:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:o:intel:ssd_d7-p5600_firmware:*:*:*:*:*:*:*:* Versions before 1.2.0 Vulnerable ·Intel
- cpe:2.3:h:intel:ssd_d7-p5600:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:o:intel:ssd_d5-p4320_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Intel
- cpe:2.3:h:intel:ssd_d5-p4320:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:o:intel:ssd_d5-p4420_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Intel
- cpe:2.3:h:intel:ssd_d5-p4420:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:o:intel:ssd_d5-p4326_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Intel
- cpe:2.3:h:intel:ssd_d5-p4326:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:o:intel:ssd_dc_p4500_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Intel
- cpe:2.3:h:intel:ssd_dc_p4500:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:o:intel:ssd_dc_p4501_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Intel
- cpe:2.3:h:intel:ssd_dc_p4501:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:o:intel:ssd_dc_p4600_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Intel
- cpe:2.3:h:intel:ssd_dc_p4600:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:o:intel:ssd_dc_p4608_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Intel
- cpe:2.3:h:intel:ssd_dc_p4608:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:o:intel:ssd_d7-p5500_firmware:*:*:*:*:*:*:*:* Versions before 2cv1c030; before 2cv1r106; before 2cv1l029 Vulnerable ·Intel
- cpe:2.3:o:intel:ssd_d7-p5600_firmware:*:*:*:*:*:*:*:* Versions before 2cv1l029; before 2cv1c030 Vulnerable ·Intel
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2021-0148
- 2026-10-03 Alias added: GHSA-f5c6-33cf-r833
References
Sources
- CVE-2021-0148 · CVE Program
- CVE-2021-0148 · NVD
- FIRST EPSS
- GHSA-f5c6-33cf-r833 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences