Resource allocation without limits in Solidigm DC P4510
Priority LOW 27CWE-770Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Denial of service
- Confidentiality · integrity · availability
- None · None · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-770.
Summary
Improper resource management in firmware of some Solidigm DC Products may allow an attacker to potentially enable denial of service.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.0016 5th percentileScored 2026-11-07
Fix Fixed DC P4510 (Solidigm): VDV10194P4511 (Solidigm): VDV10194+12 more products
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Solidigm | DC P4510 | — | VDV10194 | Patch available | CNA |
| Solidigm | P4511 | — | VDV10194 | Patch available | CNA |
| Solidigm | P4610 | — | VDV10194 | Patch available | CNA |
| Solidigm | D5-P4320 | — | VDV10194 | Patch available | CNA |
| Solidigm | P4326 | — | VDV10194 | Patch available | CNA |
| Solidigm | P4420 | — | VDV10194 | Patch available | CNA |
| Solidigm | P5510 | — | JCV10400, JCV10404, JCV1NX93, JCV1NP93, JCV1NQ93 | Patch available | CNA |
| Solidigm | P5530 | — | YCV10200 | Patch available | CNA |
| Solidigm | P5316 | — | ACV10340, ACV1MA14, ACV1R360 | Patch available | CNA |
| Solidigm | P5520 | — | 1.2.0-9CV10410, 4IAAHPK5, 9CV1R450 | Patch available | CNA |
| Solidigm | P5620 | — | 4IAAHPK5, 1.2.0-9CV10410 | Patch available | CNA |
| Solidigm | P5628 | — | 9CV1R450 | Patch available | CNA |
| Solidigm | P5500 | — | 2CV10300, 2CV10C034, 2CV1L031, 2CV1RC53 | Patch available | CNA |
| Solidigm | P5600 | — | 2CV10300, 2CV10C034, 2CV1L031, 2CV1RC53 | Patch available | CNA |
- DC P4510 VendorSolidigm Affected — Fixed in VDV10194 Patch available CNA
- P4511 VendorSolidigm Affected — Fixed in VDV10194 Patch available CNA
- P4610 VendorSolidigm Affected — Fixed in VDV10194 Patch available CNA
- D5-P4320 VendorSolidigm Affected — Fixed in VDV10194 Patch available CNA
- P4326 VendorSolidigm Affected — Fixed in VDV10194 Patch available CNA
- P4420 VendorSolidigm Affected — Fixed in VDV10194 Patch available CNA
- P5510 VendorSolidigm Affected — Fixed in JCV10400, JCV10404, JCV1NX93, JCV1NP93, JCV1NQ93 Patch available CNA
- P5530 VendorSolidigm Affected — Fixed in YCV10200 Patch available CNA
- P5316 VendorSolidigm Affected — Fixed in ACV10340, ACV1MA14, ACV1R360 Patch available CNA
- P5520 VendorSolidigm Affected — Fixed in 1.2.0-9CV10410, 4IAAHPK5, 9CV1R450 Patch available CNA
- P5620 VendorSolidigm Affected — Fixed in 4IAAHPK5, 1.2.0-9CV10410 Patch available CNA
- P5628 VendorSolidigm Affected — Fixed in 9CV1R450 Patch available CNA
- P5500 VendorSolidigm Affected — Fixed in 2CV10300, 2CV10C034, 2CV1L031, 2CV1RC53 Patch available CNA
- P5600 VendorSolidigm Affected — Fixed in 2CV10300, 2CV10C034, 2CV1L031, 2CV1RC53 Patch available CNA
Remediation
- Fix · CNA DC P4510 (Solidigm) Fixed in VDV10194
- Fix · CNA P4511 (Solidigm) Fixed in VDV10194
- Fix · CNA P4610 (Solidigm) Fixed in VDV10194
- Fix · CNA D5-P4320 (Solidigm) Fixed in VDV10194
- Fix · CNA P4326 (Solidigm) Fixed in VDV10194
- Fix · CNA P4420 (Solidigm) Fixed in VDV10194
- Fix · CNA P5510 (Solidigm) Fixed in JCV10400, JCV10404, JCV1NX93, JCV1NP93, JCV1NQ93
- Fix · CNA P5530 (Solidigm) Fixed in YCV10200
- Fix · CNA P5316 (Solidigm) Fixed in ACV10340, ACV1MA14, ACV1R360
- Fix · CNA P5520 (Solidigm) Fixed in 1.2.0-9CV10410, 4IAAHPK5, 9CV1R450
- Fix · CNA P5620 (Solidigm) Fixed in 4IAAHPK5, 1.2.0-9CV10410
- Fix · CNA P5628 (Solidigm) Fixed in 9CV1R450
- Fix · CNA P5500 (Solidigm) Fixed in 2CV10300, 2CV10C034, 2CV1L031, 2CV1RC53
- Fix · CNA P5600 (Solidigm) Fixed in 2CV10300, 2CV10C034, 2CV1L031, 2CV1RC53
Timeline
- 2026-10-02 Threatist record created from CVE-2024-47969
- 2026-10-03 Alias added: GHSA-hxw6-pfp4-6vc8
References
More Solidigm vulnerabilities
- TI-2024-32207 Improper access control in Solidigm D7-P5500 CVSS 3.1HIGH 7.0
- TI-2024-32208 Improper access control in Solidigm DC P4510 CVSS 3.1MEDIUM 6.7
- TI-2024-32203 Improper error handling in firmware of some SSD DC Products may allow an attacker to enable denial of service. CVSS 3.1MEDIUM 6.5
- TI-2024-32205 In some Solidigm DC Products, a defect in device overprovisioning may provide information disclosure to an attacker. CVSS 3.1MEDIUM 5.1
- TI-2025-11820 Improper resource management in firmware of some Solidigm DC Products may allow an… CVSS 3.1MEDIUM 4.4
- TI-2025-11815 Missing brute-force protection in Solidigm D5-P5316, D7-P5510, D7-P5520/D7-P5620… CVSS 3.1MEDIUM 4.4
Sources
- CVE-2024-47969 · CVE Program
- CVE-2024-47969 · NVD
- FIRST EPSS
- GHSA-hxw6-pfp4-6vc8 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences