CVE-2025-12896

MediumCVSS 4.4

Published: 07/11/2025(UTC)Updated: 07/10/2026(UTC)Translated: 01/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.12%

2th percentile - higher than 2% of all known CVEs

Summary

Improper resource management in firmware of some Solidigm DC Products may allow an attacker with local or physical access to gain unauthorized access to a locked storage device.

Risk Assessment

The risk involves potential compromise of data confidentiality on locked drives, potentially leading to leakage of sensitive information.

Recommendation

Update firmware to the latest version that includes resource management fixes, and restrict physical access to devices.

Other vulnerabilities in Solidigm DC Products

CVE-2025-12902Medium
Improper resource management in the firmware of some Solidigm DC products may allow an attacker with local or physical access to gain unauthorized access to a locked storage device or cause a denial of service.

Original NVD description (English source)

Improper resource management in firmware of some Solidigm DC Products may allow an attacker with local or physical access to gain un-authorized access to a locked storage device.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS