Read the docs
TI-2024-19958 Aliases CVE-2024-30212

Microchip Harmony 3 Core library allows read and write access to RAM via a SCSI READ or WRITE command

Priority MEDIUM 64CWE-190Published · Updated

Key facts

Attack vector
Physical
Privileges required
None
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-190 and the CVSS impact.

Summary

If a SCSI READ(10) command is initiated via USB using the largest LBA (0xFFFFFFFF) with it's default block size of 512 and a count of 1, the first 512 byte of the 0x80000000 memory area is returned to the user. If the block count is increased, the full RAM can be exposed. The same method works to write to this memory area. If RAM contains pointers, those can be - depending on the application - overwritten to return data from any other offset including Progam and Boot Flash.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00568 47th percentileScored 2026-11-07
Fix Fixed MPLAB® Harmony 3 Core Module (Microchip): 3.13.4

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
MicrochipMPLAB® Harmony 3 Core Module3.0.0 to before 3.13.43.13.4Patch availableCNA
  • MPLAB® Harmony 3 Core Module VendorMicrochip Affected 3.0.0 to before 3.13.4 Fixed in 3.13.4 Patch available CNA

CPE names CISA-ADP · 1

CPEVersionsRoleVendor
cpe:2.3:a:microchip:mplab_harmony:*:*:*:*:*:*:*:*——Microchip
  • cpe:2.3:a:microchip:mplab_harmony:*:*:*:*:*:*:*:* Versions — — ·Microchip

Remediation

  • Fix · CNA MPLAB® Harmony 3 Core Module (Microchip) Fixed in 3.13.4

Timeline

  1. 2026-10-02 Threatist record created from CVE-2024-30212

References

Patch 1

Other 2

  • TI-2022-18950 Microchip Technology (Microsemi) SyncServer S650 was discovered to contain a command injection vulnerability. CVSS 3.1CRITICAL 9.8
  • TI-2023-28092 Improper input validation in Siemens SIMATIC IPC1047E CVSS 3.1CRITICAL 10.0
  • TI-2024-08405 Remote code Execution inTimeProvider® 4100 CVSS 4.0HIGH 8.5
  • TI-2009-01524 Multiple buffer overflows in Microchip MPLAB IDE 8.30 and possibly earlier versions allow… CVSS 2.0HIGH 9.3
  • TI-2020-13207 An issue was discovered in picoTCP 1.7.0. CVSS 3.1CRITICAL 9.1
  • TI-2009-01590 Stack-based buffer overflow in Microchip MPLAB IDE 8.30 allows user-assisted remote… CVSS 2.0HIGH 9.3
See all 59 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences