Race condition in Solidigm DC P4510
Priority LOW 19CWE-362Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- Low
- User interaction
- Required
- Attack complexity
- High
- Impact type
- —
- Confidentiality · integrity · availability
- None · None · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA.
Summary
Improper resource shutdown in middle of certain operations on some Solidigm DC Products may allow an attacker to potentially enable denial of service.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00101 0th percentileScored 2026-11-07
Fix Fixed DC P4510 (Solidigm): VDV10194, VEV10294, VCV10394DC P4610 (Solidigm): VDV10194, VEV10294, VCV10394+3 more products
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Solidigm | DC P4510 | — | VDV10194, VEV10294, VCV10394 | Patch available | CNA |
| Solidigm | DC P4610 | — | VDV10194, VEV10294, VCV10394 | Patch available | CNA |
| Solidigm | DC P4511 | — | VDV10194, VEV10294, VCV10394 | Patch available | CNA |
| Solidigm | D5-P4320 | — | VDV10194, VEV10294, VCV10394 | Patch available | CNA |
| Solidigm | D5-P4326 | — | VDV10194, VEV10294, VCV10394 | Patch available | CNA |
- DC P4510 VendorSolidigm Affected — Fixed in VDV10194, VEV10294, VCV10394 Patch available CNA
- DC P4610 VendorSolidigm Affected — Fixed in VDV10194, VEV10294, VCV10394 Patch available CNA
- DC P4511 VendorSolidigm Affected — Fixed in VDV10194, VEV10294, VCV10394 Patch available CNA
- D5-P4320 VendorSolidigm Affected — Fixed in VDV10194, VEV10294, VCV10394 Patch available CNA
- D5-P4326 VendorSolidigm Affected — Fixed in VDV10194, VEV10294, VCV10394 Patch available CNA
Remediation
- Fix · CNA DC P4510 (Solidigm) Fixed in VDV10194, VEV10294, VCV10394
- Fix · CNA DC P4610 (Solidigm) Fixed in VDV10194, VEV10294, VCV10394
- Fix · CNA DC P4511 (Solidigm) Fixed in VDV10194, VEV10294, VCV10394
- Fix · CNA D5-P4320 (Solidigm) Fixed in VDV10194, VEV10294, VCV10394
- Fix · CNA D5-P4326 (Solidigm) Fixed in VDV10194, VEV10294, VCV10394
Timeline
- 2026-10-02 Threatist record created from CVE-2024-47968
- 2026-10-03 Alias added: GHSA-8x2w-53h6-vwx3
References
More Solidigm vulnerabilities
- TI-2024-32207 Improper access control in Solidigm D7-P5500 CVSS 3.1HIGH 7.0
- TI-2024-32208 Improper access control in Solidigm DC P4510 CVSS 3.1MEDIUM 6.7
- TI-2024-32203 Improper error handling in firmware of some SSD DC Products may allow an attacker to enable denial of service. CVSS 3.1MEDIUM 6.5
- TI-2024-32202 Resource allocation without limits in Solidigm DC P4510 CVSS 3.1MEDIUM 6.2
- TI-2024-32205 In some Solidigm DC Products, a defect in device overprovisioning may provide information disclosure to an attacker. CVSS 3.1MEDIUM 5.1
- TI-2025-11820 Improper resource management in firmware of some Solidigm DC Products may allow an… CVSS 3.1MEDIUM 4.4
Sources
- CVE-2024-47968 · CVE Program
- CVE-2024-47968 · NVD
- FIRST EPSS
- GHSA-8x2w-53h6-vwx3 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences