CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-42642

Micron Crucial MX500 Series Solid State Drives M3CR046 is vulnerable to Buffer Overflow, which can be triggered by sending specially crafted ATA packets from the host to the drive controller. NOTE: The supplier states that this vulnerability was fully remediated in December 2024 and that updated firmware is available through Crucial’s official support page.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.015

EPSS Ranking 81.4%

CVSS Severity

CVSS v3 Score 6.7

References

Products affected by CVE-2024-42642

Crucial » Ct1000mx500ssd1 » Version: N/A

cpe:2.3:h:crucial:ct1000mx500ssd1:-
Crucial » Ct2000mx500ssd1 » Version: N/A

cpe:2.3:h:crucial:ct2000mx500ssd1:-
Crucial » Ct250mx500ssd1 » Version: N/A

cpe:2.3:h:crucial:ct250mx500ssd1:-
Crucial » Ct4000mx500ssd1 » Version: N/A

cpe:2.3:h:crucial:ct4000mx500ssd1:-
Crucial » Ct500mx500ssd1 » Version: N/A

cpe:2.3:h:crucial:ct500mx500ssd1:-
Crucial » Mx500 Firmware » Version: m3cr046

cpe:2.3:o:crucial:mx500_firmware:m3cr046

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-42642

Products

Pricing

Contact Us