CVE-2025-12902CWE-665

CVE-2025-12902

Medium · published November 8, 2025

CVSS v3.1
4.4
EPSS
0%
Percentile
2.8
In the wild
Unconfirmed
What it is

Improper resource management in firmware of some Solidigm DC Products may allow an attacker with local or physical access to gain un-authorized access to a locked Storage Device or create a Denial of Service.

The record
Technical detail
CVSS v3.1
4.4 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00137 · 2.8th percentile
Weakness
CWE-665 · Improper Initialization
Published
2025-11-08T02:15Z
References (1)
https://www.solidigm.com/support-page/support-security.html · f946a70c-00eb-42ce-8e9b-634d1f7b5a6f
EPSS history
Timeline
  • 07 NOV 20:18Z
    Improper resource management in firmware of some Solidigm DC Products may allow an attacker with local or physical access to gain un-authorized access to a…
    cvelistv5