CVE-2025-12902 - Improper resource management in firmware of some Solidigm DC Products may allow an attacker with local or physical access to gain un-authorized access to a locked Storage Device or create a Denial of Service

Back Back to CVE browser

MEDIUM

Improper resource management in firmware of some Solidigm DC Products may allow an attacker with local or physical access to gain un-authorized access to a locked Storage Device or create a Denial of Service

Published Nov 7, 2025

4.4

MEDIUM

CVSS 3.1

EPSS 0.13%

Description

Improper resource management in firmware of some Solidigm DC Products may allow an attacker with local or physical access to gain un-authorized access to a locked Storage Device or create a Denial of Service.

Affected products

Vendor Solidigm™ Product n/a Default
unaffected
- Version
  All FW prior to 5CV10326
  Status
  affected
  Constraints
  -
- Version
  All FW prior to 6DV10341(8K IU) 6CV10241(4K IU)
  Status
  affected
  Constraints
  -
- Version
  All FW prior to 9CV10490
  Status
  affected
  Constraints
  -
- Version
  All FW prior to ACV10360
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Solidigm™

n/a

unaffected

Version	Status	Constraints
All FW prior to 5CV10326	affected	-
All FW prior to 6DV10341(8K IU) 6CV10241(4K IU)	affected	-
All FW prior to 9CV10490	affected	-
All FW prior to ACV10360	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-665

References (1)

https://www.solidigm.com/support-page/support-security.html

Link	Providers	Tags
https://www.solidigm.com/support-page/support-security.html

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner Solidigm

Published Nov 7, 2025

Updated Nov 7, 2025

Reserved Nov 7, 2025

Link CVE-2025-12902

CISA Vulnrichment

Updated Nov 7, 2025

NVD

Status Deferred

Modified Jun 17, 2026

Link CVE-2025-12902

Red Hat

Severity n/a

Public date n/a

Links CVE-2025-12902