CVE-2024-42642

2024-09-0420:15:07

CWE-121

CWE-787

[email protected]

web.nvd.nist.gov

micron crucial mx500 series

buffer overflow

ata packets

CVSS3

6.7

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS

Percentile

9.6%

JSON

Micron Crucial MX500 Series Solid State Drives M3CR046 is vulnerable to Buffer Overflow, which can be triggered by sending specially crafted ATA packets from the host to the drive controller.

Affected configurations

Nvd

Node

crucialmx500_firmwareMatchm3cr046

AND

crucialct1000mx500ssd1Match-

crucialct2000mx500ssd1Match-

crucialct250mx500ssd1Match-

crucialct4000mx500ssd1Match-

crucialct500mx500ssd1Match-

VendorProductVersionCPE
crucialmx500_firmwarem3cr046cpe:2.3:o:crucial:mx500_firmware:m3cr046:*:*:*:*:*:*:*
crucialct1000mx500ssd1-cpe:2.3:h:crucial:ct1000mx500ssd1:-:*:*:*:*:*:*:*
crucialct2000mx500ssd1-cpe:2.3:h:crucial:ct2000mx500ssd1:-:*:*:*:*:*:*:*
crucialct250mx500ssd1-cpe:2.3:h:crucial:ct250mx500ssd1:-:*:*:*:*:*:*:*
crucialct4000mx500ssd1-cpe:2.3:h:crucial:ct4000mx500ssd1:-:*:*:*:*:*:*:*
crucialct500mx500ssd1-cpe:2.3:h:crucial:ct500mx500ssd1:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
crucial	mx500_firmware	m3cr046	cpe:2.3:o:crucial:mx500_firmware:m3cr046:::::::*
crucial	ct1000mx500ssd1	-	cpe:2.3:h:crucial:ct1000mx500ssd1:-:::::::*
crucial	ct2000mx500ssd1	-	cpe:2.3:h:crucial:ct2000mx500ssd1:-:::::::*
crucial	ct250mx500ssd1	-	cpe:2.3:h:crucial:ct250mx500ssd1:-:::::::*
crucial	ct4000mx500ssd1	-	cpe:2.3:h:crucial:ct4000mx500ssd1:-:::::::*
crucial	ct500mx500ssd1	-	cpe:2.3:h:crucial:ct500mx500ssd1:-:::::::*