CVE-2025-12896CWE-307

CVE-2025-12896

Medium · published November 8, 2025

CVSS v3.1
4.4
EPSS
0%
Percentile
2.4
In the wild
Unconfirmed
What it is

Improper resource management in firmware of some Solidigm DC Products may allow an attacker with local or physical access to gain un-authorized access to a locked storage device.

The record
Technical detail
CVSS v3.1
4.4 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00130 · 2.4th percentile
Weakness
CWE-307 · Improper Restriction of Excessive Authentication Attempts
Published
2025-11-08T02:15Z
References (1)
https://www.solidigm.com/support-page/support-security.html · f946a70c-00eb-42ce-8e9b-634d1f7b5a6f
EPSS history
Timeline
  • 07 NOV 20:24Z
    Improper resource management in firmware of some Solidigm DC Products may allow an attacker with local or physical access to gain un-authorized access to a…
    cvelistv5