CVE-2024-42642

Katalog CVE

CVSS 6.7 · Medium EPSS 0,49%

Kerentanan Out-of-bounds Write pada crucial mx500 firmware. Skor CVSS 3.1 6.7 (Medium) menurut NVD.

Deskripsi (NVD)

Micron Crucial MX500 Series Solid State Drives M3CR046 is vulnerable to Buffer Overflow, which can be triggered by sending specially crafted ATA packets from the host to the drive controller. NOTE: The supplier states that this vulnerability was fully remediated in December 2024 and that updated firmware is available through Crucial’s official support page.

Rincian

Terbit di NVD

4 September 2024

Terakhir diubah

5 Juli 2026

Status NVD

Modified

CVSS 3.1

6.7 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-787: Out-of-bounds Write
CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

EPSS (30 hari)

0,49% peluang dieksploitasi; lebih tinggi dari 40,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/VL4DR/CVE-2024-42642/tree/main exploit · advisory pihak ketiga
• https://www.crucial.com/support/ssd-support/mx500-support