Details of VAR-201608-0494

ID

VAR-201608-0494

TITLE

Multiple Intel Solid-State Drive DC Series Product Denial of Service Vulnerabilities

Trust: 0.6

sources: CNVD: CNVD-2016-06937

DESCRIPTION

The IntelSolid-StateDriveDC series is available on some LenovoSystemX servers. A number of IntelSolid-StateDriveDC products have a denial of service vulnerability. An attacker can exploit a vulnerability that would result in a denial of service

Trust: 0.81

sources: CNVD: CNVD-2016-06937 // BID: 92083

IOT TAXONOMY

category:

['Network device']

sub_category:

Trust: 0.6

sources: CNVD: CNVD-2016-06937

AFFECTED PRODUCTS

vendor:	lenovo	model:	intel\302\256 solid-state drive dc s3500 series d2010370	scope:	-	version:	-	Trust: 0.6
vendor:	lenovo	model:	intel\302\256 solid-state drive dc s3500 series d2011370	scope:	-	version:	-	Trust: 0.6
vendor:	lenovo	model:	intel\302\256 solid-state drive dc s3700 series 5dv10270	scope:	-	version:	-	Trust: 0.6
vendor:	lenovo	model:	intel\302\256 solid-state drive dc s3700 series 5dv11270	scope:	-	version:	-	Trust: 0.6
vendor:	lenovo	model:	intel\302\256 solid-state drive dc s3500 m.2 series g2010100	scope:	-	version:	-	Trust: 0.6
vendor:	lenovo	model:	intel\302\256 solid-state drive dc s3500 m.2 series g2010110	scope:	-	version:	-	Trust: 0.6
vendor:	lenovo	model:	intel\302\256 solid-state drive dc s3500 m.2 series g2010120	scope:	-	version:	-	Trust: 0.6
vendor:	lenovo	model:	intel\302\256 solid-state drive dc s3500 m.2 series g2010130	scope:	-	version:	-	Trust: 0.6
vendor:	lenovo	model:	intel\302\256 solid-state drive dc s3500 m.2 series g2010140	scope:	-	version:	-	Trust: 0.6
vendor:	lenovo	model:	intel\302\256 solid-state drive dc s3500 m.2 series g2010141	scope:	-	version:	-	Trust: 0.6
vendor:	lenovo	model:	intel\302\256 solid-state drive dc s3500 hd series g2010100	scope:	-	version:	-	Trust: 0.6
vendor:	lenovo	model:	intel\302\256 solid-state drive dc s3500 hd series g2010110	scope:	-	version:	-	Trust: 0.6
vendor:	lenovo	model:	intel\302\256 solid-state drive dc s3500 hd series g2010120	scope:	-	version:	-	Trust: 0.6
vendor:	lenovo	model:	intel\302\256 solid-state drive dc s3500 hd series g2010130	scope:	-	version:	-	Trust: 0.6
vendor:	lenovo	model:	intel\302\256 solid-state drive dc s3500 hd series g2010140	scope:	-	version:	-	Trust: 0.6
vendor:	lenovo	model:	intel\302\256 solid-state drive dc s3500 hd series g2010141	scope:	-	version:	-	Trust: 0.6
vendor:	lenovo	model:	intel\302\256 solid-state drive dc s3510 series g2010100	scope:	-	version:	-	Trust: 0.6
vendor:	lenovo	model:	intel\302\256 solid-state drive dc s3510 series g2010110	scope:	-	version:	-	Trust: 0.6
vendor:	lenovo	model:	intel\302\256 solid-state drive dc s3510 series g2010120	scope:	-	version:	-	Trust: 0.6
vendor:	lenovo	model:	intel\302\256 solid-state drive dc s3510 series g2010130	scope:	-	version:	-	Trust: 0.6
vendor:	lenovo	model:	intel\302\256 solid-state drive dc s3510 series g2010140	scope:	-	version:	-	Trust: 0.6
vendor:	lenovo	model:	intel\302\256 solid-state drive dc s3510 series g2010141	scope:	-	version:	-	Trust: 0.6
vendor:	lenovo	model:	intel\302\256 solid-state drive dc s3610 series g2010100	scope:	-	version:	-	Trust: 0.6
vendor:	lenovo	model:	intel\302\256 solid-state drive dc s3610 series g2010110	scope:	-	version:	-	Trust: 0.6
vendor:	lenovo	model:	intel\302\256 solid-state drive dc s3610 series g2010120	scope:	-	version:	-	Trust: 0.6
vendor:	lenovo	model:	intel\302\256 solid-state drive dc s3610 series g2010130	scope:	-	version:	-	Trust: 0.6
vendor:	lenovo	model:	intel\302\256 solid-state drive dc s3610 series g2010140	scope:	-	version:	-	Trust: 0.6
vendor:	lenovo	model:	intel\302\256 solid-state drive dc s3610 series g2010141	scope:	-	version:	-	Trust: 0.6
vendor:	lenovo	model:	intel\302\256 solid-state drive dc s3710 series g2010100	scope:	-	version:	-	Trust: 0.6
vendor:	lenovo	model:	intel\302\256 solid-state drive dc s3710 series g2010110	scope:	-	version:	-	Trust: 0.6
vendor:	lenovo	model:	intel\302\256 solid-state drive dc s3710 series g2010120	scope:	-	version:	-	Trust: 0.6
vendor:	lenovo	model:	intel\302\256 solid-state drive dc s3710 series g2010130	scope:	-	version:	-	Trust: 0.6
vendor:	lenovo	model:	intel\302\256 solid-state drive dc s3710 series g2010140	scope:	-	version:	-	Trust: 0.6
vendor:	lenovo	model:	intel\302\256 solid-state drive dc s3710 series g2010141	scope:	-	version:	-	Trust: 0.6
vendor:	lenovo	model:	system	scope:	eq	version:	x3950x60	Trust: 0.3
vendor:	lenovo	model:	system	scope:	eq	version:	x3850x60	Trust: 0.3
vendor:	lenovo	model:	system m4	scope:	eq	version:	x37500	Trust: 0.3
vendor:	lenovo	model:	system m5	scope:	eq	version:	x36500	Trust: 0.3
vendor:	lenovo	model:	system m5	scope:	eq	version:	x35500	Trust: 0.3
vendor:	lenovo	model:	system m5	scope:	eq	version:	x35000	Trust: 0.3
vendor:	lenovo	model:	system m5	scope:	eq	version:	x32500	Trust: 0.3
vendor:	lenovo	model:	system m5	scope:	eq	version:	x31000	Trust: 0.3
vendor:	lenovo	model:	nextscale nx360 m5	scope:	eq	version:	0	Trust: 0.3
vendor:	lenovo	model:	flex system m5	scope:	eq	version:	x8800	Trust: 0.3
vendor:	lenovo	model:	flex system	scope:	eq	version:	x8800	Trust: 0.3
vendor:	lenovo	model:	flex system	scope:	eq	version:	x480x60	Trust: 0.3
vendor:	lenovo	model:	flex system	scope:	eq	version:	x4800	Trust: 0.3
vendor:	lenovo	model:	flex system m5	scope:	eq	version:	x4400	Trust: 0.3
vendor:	lenovo	model:	flex system m4	scope:	eq	version:	x4400	Trust: 0.3
vendor:	lenovo	model:	flex system	scope:	eq	version:	x280x60	Trust: 0.3
vendor:	lenovo	model:	flex system	scope:	eq	version:	x2800	Trust: 0.3
vendor:	lenovo	model:	flex system m5	scope:	eq	version:	x2400	Trust: 0.3
vendor:	lenovo	model:	flex system m4	scope:	eq	version:	x2400	Trust: 0.3
vendor:	intel	model:	solid-state drive dc s3710 series g2010140	scope:	-	version:	-	Trust: 0.3
vendor:	intel	model:	solid-state drive dc s3710 series g2010130	scope:	-	version:	-	Trust: 0.3
vendor:	intel	model:	solid-state drive dc s3710 series g2010120	scope:	-	version:	-	Trust: 0.3
vendor:	intel	model:	solid-state drive dc s3710 series g2010110	scope:	-	version:	-	Trust: 0.3
vendor:	intel	model:	solid-state drive dc s3710 series g2010100	scope:	-	version:	-	Trust: 0.3
vendor:	intel	model:	solid-state drive dc s3700 series 5dv11270	scope:	-	version:	-	Trust: 0.3
vendor:	intel	model:	solid-state drive dc s3700 series 5dv10270	scope:	-	version:	-	Trust: 0.3
vendor:	intel	model:	solid-state drive dc s3610 series g2010141	scope:	-	version:	-	Trust: 0.3
vendor:	intel	model:	solid-state drive dc s3610 series g2010140	scope:	-	version:	-	Trust: 0.3
vendor:	intel	model:	solid-state drive dc s3610 series g2010130	scope:	-	version:	-	Trust: 0.3
vendor:	intel	model:	solid-state drive dc s3610 series g2010120	scope:	-	version:	-	Trust: 0.3
vendor:	intel	model:	solid-state drive dc s3610 series g2010110	scope:	-	version:	-	Trust: 0.3
vendor:	intel	model:	solid-state drive dc s3610 series g2010100	scope:	-	version:	-	Trust: 0.3
vendor:	intel	model:	solid-state drive dc s3510 series g2010141	scope:	-	version:	-	Trust: 0.3
vendor:	intel	model:	solid-state drive dc s3510 series g2010140	scope:	-	version:	-	Trust: 0.3
vendor:	intel	model:	solid-state drive dc s3510 series g2010130	scope:	-	version:	-	Trust: 0.3
vendor:	intel	model:	solid-state drive dc s3510 series g2010120	scope:	-	version:	-	Trust: 0.3
vendor:	intel	model:	solid-state drive dc s3510 series g2010110	scope:	-	version:	-	Trust: 0.3
vendor:	intel	model:	solid-state drive dc s3510 series g2010100	scope:	-	version:	-	Trust: 0.3
vendor:	intel	model:	solid-state drive dc s3500 series d2011370	scope:	-	version:	-	Trust: 0.3
vendor:	intel	model:	solid-state drive dc s3500 series d2010370	scope:	-	version:	-	Trust: 0.3
vendor:	intel	model:	solid-state drive dc s3500 m.2 series g2010141	scope:	-	version:	-	Trust: 0.3
vendor:	intel	model:	solid-state drive dc s3500 m.2 series g2010140	scope:	-	version:	-	Trust: 0.3
vendor:	intel	model:	solid-state drive dc s3500 m.2 series g2010130	scope:	-	version:	-	Trust: 0.3
vendor:	intel	model:	solid-state drive dc s3500 m.2 series g2010120	scope:	-	version:	-	Trust: 0.3
vendor:	intel	model:	solid-state drive dc s3500 m.2 series g2010110	scope:	-	version:	-	Trust: 0.3
vendor:	intel	model:	solid-state drive dc s3500 m.2 series g2010100	scope:	-	version:	-	Trust: 0.3
vendor:	intel	model:	solid-state drive dc s3500 hd series g2010141	scope:	-	version:	-	Trust: 0.3
vendor:	intel	model:	solid-state drive dc s3500 hd series g2010140	scope:	-	version:	-	Trust: 0.3
vendor:	intel	model:	solid-state drive dc s3500 hd series g2010130	scope:	-	version:	-	Trust: 0.3
vendor:	intel	model:	solid-state drive dc s3500 hd series g2010120	scope:	-	version:	-	Trust: 0.3
vendor:	intel	model:	solid-state drive dc s3500 hd series g2010110	scope:	-	version:	-	Trust: 0.3
vendor:	intel	model:	solid-state drive dc s3500 hd series g2010100	scope:	-	version:	-	Trust: 0.3
vendor:	ibm	model:	system	scope:	eq	version:	x3950x50	Trust: 0.3
vendor:	ibm	model:	system	scope:	eq	version:	x3850x50	Trust: 0.3
vendor:	ibm	model:	system m4	scope:	eq	version:	x37500	Trust: 0.3
vendor:	ibm	model:	system	scope:	eq	version:	x3690x50	Trust: 0.3
vendor:	ibm	model:	system m4 hd	scope:	eq	version:	x36500	Trust: 0.3
vendor:	ibm	model:	system m4 bd	scope:	eq	version:	x36500	Trust: 0.3
vendor:	ibm	model:	system m4	scope:	eq	version:	x36500	Trust: 0.3
vendor:	ibm	model:	system m4	scope:	eq	version:	x36300	Trust: 0.3
vendor:	ibm	model:	system m4	scope:	eq	version:	x35500	Trust: 0.3
vendor:	ibm	model:	system m4	scope:	eq	version:	x35300	Trust: 0.3
vendor:	ibm	model:	system m4	scope:	eq	version:	x35000	Trust: 0.3
vendor:	ibm	model:	system m4	scope:	eq	version:	x33000	Trust: 0.3
vendor:	ibm	model:	system m4	scope:	eq	version:	x32500	Trust: 0.3
vendor:	ibm	model:	system m4	scope:	eq	version:	x31000	Trust: 0.3
vendor:	ibm	model:	nextscale nx360 m4	scope:	eq	version:	0	Trust: 0.3
vendor:	ibm	model:	idataplex dx360 m4 water cooled	scope:	eq	version:	0	Trust: 0.3
vendor:	ibm	model:	idataplex dx360 m4	scope:	eq	version:	0	Trust: 0.3
vendor:	ibm	model:	flex system m4	scope:	eq	version:	x8800	Trust: 0.3
vendor:	ibm	model:	flex system m4	scope:	eq	version:	x4800	Trust: 0.3
vendor:	ibm	model:	flex system m4	scope:	eq	version:	x4400	Trust: 0.3
vendor:	ibm	model:	flex system m4	scope:	eq	version:	x2800	Trust: 0.3
vendor:	ibm	model:	flex system m4	scope:	eq	version:	x2400	Trust: 0.3
vendor:	ibm	model:	flex system m4	scope:	eq	version:	x2220	Trust: 0.3
vendor:	ibm	model:	flex system m4	scope:	eq	version:	x2200	Trust: 0.3
vendor:	ibm	model:	bladecenter hx5	scope:	eq	version:	0	Trust: 0.3
vendor:	ibm	model:	bladecenter hs23e	scope:	eq	version:	0	Trust: 0.3
vendor:	ibm	model:	bladecenter hs23	scope:	eq	version:	0	Trust: 0.3
vendor:	ibm	model:	bladecenter hs22v	scope:	eq	version:	0	Trust: 0.3
vendor:	ibm	model:	bladecenter hs22	scope:	eq	version:	0	Trust: 0.3
vendor:	lenovo	model:	system	scope:	ne	version:	x3950x61.20.5	Trust: 0.3
vendor:	lenovo	model:	system	scope:	ne	version:	x3850x61.20.5	Trust: 0.3
vendor:	lenovo	model:	system m4	scope:	ne	version:	x37501.20.5	Trust: 0.3
vendor:	lenovo	model:	system m5	scope:	ne	version:	x36501.20.5	Trust: 0.3
vendor:	lenovo	model:	system m5	scope:	ne	version:	x35501.20.5	Trust: 0.3
vendor:	lenovo	model:	system m5	scope:	ne	version:	x35001.20.5	Trust: 0.3
vendor:	lenovo	model:	system m5	scope:	ne	version:	x32501.20.5	Trust: 0.3
vendor:	lenovo	model:	system m5	scope:	ne	version:	x31001.20.5	Trust: 0.3
vendor:	lenovo	model:	nextscale nx360 m5	scope:	ne	version:	1.20.5	Trust: 0.3
vendor:	lenovo	model:	flex system m5	scope:	ne	version:	x8801.20.5	Trust: 0.3
vendor:	lenovo	model:	flex system	scope:	ne	version:	x8801.20.5	Trust: 0.3
vendor:	lenovo	model:	flex system	scope:	ne	version:	x480x61.20.5	Trust: 0.3
vendor:	lenovo	model:	flex system	scope:	ne	version:	x4801.20.5	Trust: 0.3
vendor:	lenovo	model:	flex system m5	scope:	ne	version:	x4401.20.5	Trust: 0.3
vendor:	lenovo	model:	flex system m4	scope:	ne	version:	x4401.20.5	Trust: 0.3
vendor:	lenovo	model:	flex system	scope:	ne	version:	x280x61.20.5	Trust: 0.3
vendor:	lenovo	model:	flex system	scope:	ne	version:	x2801.20.5	Trust: 0.3
vendor:	lenovo	model:	flex system m5	scope:	ne	version:	x2401.20.5	Trust: 0.3
vendor:	lenovo	model:	flex system m4	scope:	ne	version:	x2401.20.5	Trust: 0.3
vendor:	intel	model:	solid-state drive dc s3710 series g2010150	scope:	ne	version:	-	Trust: 0.3
vendor:	intel	model:	solid-state drive dc s3700 series 5dv12270	scope:	ne	version:	-	Trust: 0.3
vendor:	intel	model:	solid-state drive dc s3610 series g2010150	scope:	ne	version:	-	Trust: 0.3
vendor:	intel	model:	solid-state drive dc s3510 series g2010150	scope:	ne	version:	-	Trust: 0.3
vendor:	intel	model:	solid-state drive dc s3500 series d2012370	scope:	ne	version:	-	Trust: 0.3
vendor:	intel	model:	solid-state drive dc s3500 m.2 series g2010150	scope:	ne	version:	-	Trust: 0.3
vendor:	intel	model:	solid-state drive dc s3500 hd series g2010150	scope:	ne	version:	-	Trust: 0.3
vendor:	ibm	model:	system	scope:	ne	version:	x3950x51.20	Trust: 0.3
vendor:	ibm	model:	system	scope:	ne	version:	x3850x51.20	Trust: 0.3
vendor:	ibm	model:	system m4	scope:	ne	version:	x37501.20	Trust: 0.3
vendor:	ibm	model:	system	scope:	ne	version:	x3690x51.20	Trust: 0.3
vendor:	ibm	model:	system m4 hd	scope:	ne	version:	x36501.20	Trust: 0.3
vendor:	ibm	model:	system m4 bd	scope:	ne	version:	x36501.20	Trust: 0.3
vendor:	ibm	model:	system m4	scope:	ne	version:	x36501.20	Trust: 0.3
vendor:	ibm	model:	system m4	scope:	ne	version:	x36301.20	Trust: 0.3
vendor:	ibm	model:	system m4	scope:	ne	version:	x35501.20	Trust: 0.3
vendor:	ibm	model:	system m4	scope:	ne	version:	x35301.20	Trust: 0.3
vendor:	ibm	model:	system m4	scope:	ne	version:	x35001.20	Trust: 0.3
vendor:	ibm	model:	system m4	scope:	ne	version:	x33001.20	Trust: 0.3
vendor:	ibm	model:	system m4	scope:	ne	version:	x32501.20	Trust: 0.3
vendor:	ibm	model:	system m4	scope:	ne	version:	x31001.20	Trust: 0.3
vendor:	ibm	model:	nextscale nx360 m4	scope:	ne	version:	1.20	Trust: 0.3
vendor:	ibm	model:	idataplex dx360 m4 water cooled	scope:	ne	version:	1.20	Trust: 0.3
vendor:	ibm	model:	idataplex dx360 m4	scope:	ne	version:	1.20	Trust: 0.3
vendor:	ibm	model:	flex system m4	scope:	ne	version:	x8801.20	Trust: 0.3
vendor:	ibm	model:	flex system m4	scope:	ne	version:	x4801.20	Trust: 0.3
vendor:	ibm	model:	flex system m4	scope:	ne	version:	x4401.20	Trust: 0.3
vendor:	ibm	model:	flex system m4	scope:	ne	version:	x2801.20	Trust: 0.3
vendor:	ibm	model:	flex system m4	scope:	ne	version:	x2401.20	Trust: 0.3
vendor:	ibm	model:	flex system m4	scope:	ne	version:	x2221.20	Trust: 0.3
vendor:	ibm	model:	flex system m4	scope:	ne	version:	x2201.20	Trust: 0.3
vendor:	ibm	model:	bladecenter hx5	scope:	ne	version:	1.20	Trust: 0.3
vendor:	ibm	model:	bladecenter hs23e	scope:	ne	version:	1.20	Trust: 0.3
vendor:	ibm	model:	bladecenter hs23	scope:	ne	version:	1.20	Trust: 0.3
vendor:	ibm	model:	bladecenter hs22v	scope:	ne	version:	1.20	Trust: 0.3
vendor:	ibm	model:	bladecenter hs22	scope:	ne	version:	1.20	Trust: 0.3

sources: CNVD: CNVD-2016-06937 // BID: 92083

CVSS

SEVERITY

CVSSV2

CVSSV3

CNVD:	CNVD-2016-06937
value:	MEDIUM
Trust: 0.6

CNVD:	CNVD-2016-06937
severity:	MEDIUM
baseScore:	5.0
vectorString:	AV:N/AC:L/AU:N/C:N/I:N/A:P
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	PARTIAL
exploitabilityScore:	10.0
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.6

sources: CNVD: CNVD-2016-06937

THREAT TYPE

network

Trust: 0.3

sources: BID: 92083

TYPE

Failure to Handle Exceptional Conditions

Trust: 0.3

sources: BID: 92083

PATCH

title:

Patches for multiple Intel Solid-StateDriveDC series denial of service vulnerabilities

url:

https://www.cnvd.org.cn/patchinfo/show/80950

Trust: 0.6

sources: CNVD: CNVD-2016-06937

EXTERNAL IDS

db:	BID	id:	92083	Trust: 0.9
db:	CNVD	id:	CNVD-2016-06937	Trust: 0.6

sources: CNVD: CNVD-2016-06937 // BID: 92083

REFERENCES

url:	https://security-center.intel.com/advisory.aspx?intelid=intel-sa-00050&languageid=en-fr	Trust: 0.9
url:	http://www.securityfocus.com/bid/92083	Trust: 0.6
url:	http://www.lenovo.com/ca/en/	Trust: 0.3
url:	https://support.lenovo.com/us/en/product_security/len_6022	Trust: 0.3

sources: CNVD: CNVD-2016-06937 // BID: 92083

CREDITS

The vendor reported this issue.

Trust: 0.3

sources: BID: 92083

SOURCES

db:	CNVD	id:	CNVD-2016-06937
db:	BID	id:	92083

LAST UPDATE DATE

2022-05-17T01:41:09.358000+00:00

SOURCES UPDATE DATE

db:	CNVD	id:	CNVD-2016-06937	date:	2016-08-31T00:00:00
db:	BID	id:	92083	date:	2016-03-15T00:00:00

SOURCES RELEASE DATE

db:	CNVD	id:	CNVD-2016-06937	date:	2016-08-31T00:00:00
db:	BID	id:	92083	date:	2016-03-15T00:00:00