CVE-2025-12902 - CVE House
Back to Database
Status published Medium CVE-2025-12902

Improper resource management in firmware of some Solidigm DC Products...

Vulnerability Description

Improper resource management in firmware of some Solidigm DC Products may allow an attacker with local or physical access to gain un-authorized access to a locked Storage Device or create a Denial of Service.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-12902

Credits & Attribution

No credits recorded in the NVD database.

References

More from Solidigm™

View All →
CVE-2025-12896
Improper resource management in firmware of some Solidigm DC Products...
Medium 4.4

Affected Vendor

Solidigm™

View all reports →

Affected Software

D5-P5316, D5-P5430, D7-P5520/D7-P5620, D5-P5336
Vulnerable Versions:
All FW prior to ACV10360, All FW prior to 6DV10341(8K IU) 6CV10241(4K IU), All FW prior to 9CV10490, All FW prior to 5CV10326

Timeline

Official Publish: November 7th, 2025
Last Modified: November 7th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Weaknesses (CWE)

CWE-665

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.