CVE-2024-47976

Published Oct 7, 2024 CVSS 3.1 · 6.7 Medium EPSS < 1% KEV · Not listed
Description
Improper access removal handling in firmware of some Solidigm DC Products may allow an attacker with physical access to gain unauthorized access.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2024-42852 Improper access removal handling in firmware of some Solidigm DC Products may allow an attacker with physical access to gain unauthorized access.
History
Type Values Removed Values Added
Weaknesses CWE-284
Type Values Removed Values Added
First Time appeared Solidigm
Solidigm d5 P4320 Firmware
Solidigm d5 P4326 Firmware
Solidigm d5 P5316 Firmware
Solidigm d7 P5500 Firmware
Solidigm d7 P5510 Firmware
Solidigm d7 P5520 Firmware
Solidigm d7 P5600 Firmware
Solidigm d7 P5620 Firmware
Solidigm d7 P5628 Firmware
Solidigm dc P4510 Firmware
Solidigm dc P4511 Firmware
Solidigm dc P4610 Firmware
CPEs cpe:2.3:o:solidigm:d5_p4320_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:solidigm:d5_p4326_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:solidigm:d5_p5316_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:solidigm:d7_p5500_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:solidigm:d7_p5510_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:solidigm:d7_p5520_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:solidigm:d7_p5600_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:solidigm:d7_p5620_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:solidigm:d7_p5628_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:solidigm:dc_p4510_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:solidigm:dc_p4511_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:solidigm:dc_p4610_firmware:*:*:*:*:*:*:*:*
Vendors & Products Solidigm
Solidigm d5 P4320 Firmware
Solidigm d5 P4326 Firmware
Solidigm d5 P5316 Firmware
Solidigm d7 P5500 Firmware
Solidigm d7 P5510 Firmware
Solidigm d7 P5520 Firmware
Solidigm d7 P5600 Firmware
Solidigm d7 P5620 Firmware
Solidigm d7 P5628 Firmware
Solidigm dc P4510 Firmware
Solidigm dc P4511 Firmware
Solidigm dc P4610 Firmware
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Type Values Removed Values Added
Description Improper access removal handling in firmware of some Solidigm DC Products may allow an attacker with physical access to gain unauthorized access.
References
Metrics cvssV3_1

{'score': 6.7, 'vector': 'CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N'}