« Volver al listado

CVE-2024-47972

Estado: AplazadaMedia (4)—

Improper resource management in firmware of some Solidigm DC Products may allow an attacker to potentially control the performance of the resource.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2024-47972",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2024-47972",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2024-10-07T19:39:52.303674Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "f946a70c-00eb-42ce-8e9b-634d1f7b5a6f",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 4,
          "attackVector": "LOCAL",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "LOW",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 1.4,
        "exploitabilityScore": 2.5
      }
    ]
  },
  "affected": [
    {
      "source": "f946a70c-00eb-42ce-8e9b-634d1f7b5a6f",
      "affectedData": [
        {
          "vendor": "Solidigm",
          "product": "D7-P5510",
          "versions": [
            {
              "status": "unaffected",
              "version": "JCV10300"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "Solidigm",
          "product": "D5-P5316",
          "versions": [
            {
              "status": "affected",
              "version": "ACV10340"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "Solidigm",
          "product": "D7-P5520",
          "versions": [
            {
              "status": "unaffected",
              "version": "9CV10410"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "Solidigm",
          "product": "D7-P5620",
          "versions": [
            {
              "status": "unaffected",
              "version": "9CV10410"
            }
          ],
          "defaultStatus": "unaffected"
        }
      ]
    }
  ],
  "published": "2024-10-07T20:15:06.797",
  "references": [
    {
      "url": "https://www.solidigm.com/support-page/support-security.html",
      "source": "f946a70c-00eb-42ce-8e9b-634d1f7b5a6f"
    }
  ],
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "description": [
        {
          "lang": "en",
          "value": "CWE-404"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Improper resource management in firmware of some Solidigm DC Products may allow an attacker to potentially control the performance of the resource."
    },
    {
      "lang": "es",
      "value": "La gestión inadecuada de recursos en el firmware de algunos productos Solidigm DC puede permitir que un atacante controle potencialmente el rendimiento del recurso."
    }
  ],
  "lastModified": "2026-06-17T07:58:04.570",
  "sourceIdentifier": "f946a70c-00eb-42ce-8e9b-634d1f7b5a6f"
}