CVE-2024-30212
May 28, 2024, 5:11 p.m.
None
No Score
Description
If a SCSI READ(10) command is initiated via USB using the largest LBA
(0xFFFFFFFF) with it's default block size of 512 and a count of 1,
the first 512 byte of the 0x80000000 memory area is returned to the
user. If the block count is increased, the full RAM can be exposed.
The same method works to write to this memory area. If RAM contains
pointers, those can be - depending on the application - overwritten to
return data from any other offset including Progam and Boot Flash.
Product(s) Impacted
| Product | Versions |
|---|---|
| UNKNOWN |
|
Weaknesses
Common security weaknesses mapped to this vulnerability.
Tags
Timeline
Published: May 28, 2024, 4:15 p.m.
Last Modified: May 28, 2024, 5:11 p.m.
Last Modified: May 28, 2024, 5:11 p.m.
Status : Awaiting Analysis
CVE has been recently published to the CVE List and has been received by the NVD.
More infoSource
dc3f6da9-85b5-4a73-84a2-2ec90b40fca5
*Disclaimer: Some vulnerabilities do not have an associated CPE. To enhance the data, we use AI to infer CPEs based on CVE details. This is an automated process and might not always be accurate.