CVE-2024-42642

Опубликовано: 04 сент. 2024

Источник: nvd

CVSS3: 6.7

EPSS Низкий

Описание

Micron Crucial MX500 Series Solid State Drives M3CR046 is vulnerable to Buffer Overflow, which can be triggered by sending specially crafted ATA packets from the host to the drive controller. NOTE: The supplier states that this vulnerability was fully remediated in December 2024 and that updated firmware is available through Crucial’s official support page.

Ссылки

http://microncrucial.com
Broken Link
https://github.com/VL4DR/CVE-2024-42642/tree/main
Exploit
Third Party Advisory
https://www.crucial.com/support/ssd-support/mx500-support

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:crucial:mx500_firmware:m3cr046:*:*:*:*:*:*:*

Одно из

cpe:2.3:h:crucial:ct1000mx500ssd1:-:*:*:*:*:*:*:*

cpe:2.3:h:crucial:ct2000mx500ssd1:-:*:*:*:*:*:*:*

cpe:2.3:h:crucial:ct250mx500ssd1:-:*:*:*:*:*:*:*

cpe:2.3:h:crucial:ct4000mx500ssd1:-:*:*:*:*:*:*:*

cpe:2.3:h:crucial:ct500mx500ssd1:-:*:*:*:*:*:*:*

EPSS

Процентиль: 85%

0.02599

Низкий

6.7 Medium

CVSS3

Дефекты

CWE-787

CWE-120

Связанные уязвимости

GHSA-fxwr-6hqv-m4wv

CVSS3: 9.8

github

больше 1 года назад

Micron Crucial MX500 Series Solid State Drives M3CR046 is vulnerable to Buffer Overflow, which can be triggered by sending specially crafted ATA packets from the host to the drive controller.