CVE-2024-7726

The CVE-2024-7726 entry describes an unauthenticated, externally accessible JTAG port on Kioxia CM6, PM6 and PM7 SSDs. The JTAG port is exposed on the drive’s circuit board, allowing a physically proximate attacker to access the two main CPU cores’ firmware/memory, execute arbitrary code, alter f...

PT-2024-38535 · Kioxia · Kioxia Pm6 +2

Name of the Vulnerable Software and Affected Versions: Kioxia PM6, PM7, and CM6 devices affected versions not specified Description: The issue concerns an unauthenticated accessible JTAG port on the Kioxia PM6, PM7, and CM6 devices. This port is exposed on the drive's circuit board and can be...