Description
Micron Crucial MX500 Series Solid State Drives M3CR046 is vulnerable to Buffer Overflow, which can be triggered by sending specially crafted ATA packets from the host to the drive controller. NOTE: The supplier states that this vulnerability was fully remediated in December 2024 and that updated firmware is available through Crucial’s official support page.
Exploits (1)
Scores
CVSS v3
6.7
EPSS
0.0154
EPSS Percentile
81.4%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CISA SSVC
Vulnrichment
Exploitation
poc
Automatable
no
Technical Impact
total
Details
CWE
CWE-787
CWE-120
Status
published
Products (1)
crucial/mx500_firmware
m3cr046
Published
Sep 04, 2024
Tracked Since
Feb 18, 2026