CVE-2025-12902
MediumCVSS 4.4Exploitation Probability (EPSS)
Low risk2th percentile - higher than 2% of all known CVEs
Summary
Improper resource management in the firmware of some Solidigm DC products may allow an attacker with local or physical access to gain unauthorized access to a locked storage device or cause a denial of service.
Risk Assessment
An attacker with physical access to the device could bypass the lock and access data or cause device unavailability. This may lead to data confidentiality breaches or operational disruptions.
Recommendation
Update the firmware of Solidigm DC products to the latest version containing the fix. Restrict physical access to storage devices to trusted personnel.
Other vulnerabilities in Solidigm DC Products
Original NVD description (English source)
Improper resource management in firmware of some Solidigm DC Products may allow an attacker with local or physical access to gain un-authorized access to a locked Storage Device or create a Denial of Service.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS