CVE-2025-12902 describes an improper resource management vulnerability in the firmware of certain Solidigm DC Products. This flaw allows an attacker with local or physical access to bypass security on a locked storage device, potentially leading to unauthorized data access or a denial of service. Rated Medium with a CVSS score of 4.4, the attack requires high privileges and local access, but has high confidentiality impact. Currently, there is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
| Solidigm™ | D5-P5316, D5-P5430, D7-P5520/D7-P5620, D5-P5336 | All FW prior to 5CV10326, All FW prior to 6DV10341(8K IU) 6CV10241(4K IU), All FW prior to 9CV10490, All FW prior to ACV10360CNA affecteddefault unaffected |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.