Kioxia CM6、PM6和PM7 安全漏洞

The Kioxia PM6 and others are a series of enterprise-class SAS write-intensive SSDs from Japan's Armor Man Kioxia. A security vulnerability exists in the Kioxia CM6, PM6, and PM7 that stems from the presence of an unauthenticated accessible JTAG port, which allows an attacker to gain full access ...

CVE-2024-7726: Missing Authentication for Critical Function

There exists an unauthenticated accessible JTAG port on the Kioxia PM6, PM7 and CM6 devices - On the Kioxia CM6, PM6 and PM7 disk drives it was discovered that the 2 main CPU cores of the SoC can be accessed via an open JTAG debug port that is exposed on the drive’s circuit board. Due to the wide...