VulnerabilityModified
CVE-2024-42642
Micron Crucial MX500 Series Solid State Drives M3CR046 is vulnerable to Buffer Overflow, which can be triggered by sending specially crafted ATA packets from the host to the drive controller.
MEDIUM 6.7EPSS 0.49%
Does this matter?
Lower severity and a low EPSS score (0.49%). Track it; it rarely justifies an emergency change on its own.
Description
Micron Crucial MX500 Series Solid State Drives M3CR046 is vulnerable to Buffer Overflow, which can be triggered by sending specially crafted ATA packets from the host to the drive controller. NOTE: The supplier states that this vulnerability was fully remediated in December 2024 and that updated firmware is available through Crucial’s official support page.
- CVSS 3.1
- 6.7 MEDIUMCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 0.49% probability · 41th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-787, CWE-120
- Affected
- crucial/mx500 firmware
- Source
- cve@mitre.org
References
- https://github.com/VL4DR/CVE-2024-42642/tree/mainExploit, Third Party Advisory
- https://www.crucial.com/support/ssd-support/mx500-support
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.