CVE-2024-47976

Published: Oct 7, 2024

Modified: Mar 13, 2025

PUBLISHED

CVSS v3.1

6.7

MEDIUM

Improper access removal handling in firmware of some Solidigm DC Products may allow an attacker with physical access to gain unauthorized access.

Vendor	Product	Versions
Solidigm	DC P4510	unaffected `VDV10194` unaffected `VEV10294` unaffected `VCV10394`
Solidigm	DC P4610	unaffected `VCV10394` unaffected `VEV10294` unaffected `VDV10194`
Solidigm	D7-P5500	unaffected `2CV10C034`
Solidigm	D7-P5600	unaffected `2CV10C034`
Solidigm	D5-P5316	unaffected `ACV1R330` unaffected `ACV1MA10` unaffected `ACV10340`
Solidigm	D7-P5520	unaffected `9CV1R410` unaffected `9CV1MA70` unaffected `9CV10410` unaffected `0.0.25-9CV10220`
Solidigm	D7-P5620	unaffected `9CV10410` unaffected `0.0.25-9CV10220`
Solidigm	DC P4511	unaffected `VDV10194` unaffected `VEV10294` unaffected `VCV10394`
Solidigm	D5-P4320	unaffected `VDV10194` unaffected `VEV10294` unaffected `VCV10394`
Solidigm	D5-P4326	unaffected `VCV10394` unaffected `VEV10294` unaffected `VDV10194`
Solidigm	D7-P5510	unaffected `JCV10404`
Solidigm	D7-P5628	unaffected `9CV1R410`

CVSS v3.1 Vector

CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N

Attack Vector

Physical

Attack Complexity

High

Privileges Required

Low

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

High

Availability

None

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.