Improper access control in Solidigm D7-P5500
Priority LOW 32CWE-284Published · Updated
Key facts
- Attack vector
- Physical
- Privileges required
- None
- User interaction
- Required
- Attack complexity
- Low
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- High · High · None
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-284.
Summary
Improper access control validation in firmware of some Solidigm DC Products may allow an attacker with physical access to gain unauthorized access or an attacker with local access to potentially enable denial of service.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00199 9th percentileScored 2026-11-07
Fix Fixed D7-P5500 (Solidigm): 1.3.0-2CV10300D7-P5600 (Solidigm): 2CV10C034, 1.3.0-2CV10300+9 more products
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Solidigm | D7-P5500 | — | 1.3.0-2CV10300 | Patch available | CNA |
| Solidigm | D7-P5600 | — | 2CV10C034, 1.3.0-2CV10300 | Patch available | CNA |
| Solidigm | D5-P5316 | — | 1.0.4-ACV10060, ACV1MA10, ACV1R330 | Patch available | CNA |
| Solidigm | D7-P5520 | — | 0.0.25-9CV10220, 9CV10410, 9CV1MA70, 9CV1R410 | Patch available | CNA |
| Solidigm | D7-P5620 | — | 0.0.25-9CV10220, 9CV10410 | Patch available | CNA |
| Solidigm | D7-P5628 | — | 9CV1R410 | Patch available | CNA |
| Solidigm | DC P4510 | — | VDV10194, VEV10294, VCV10394 | Patch available | CNA |
| Solidigm | DC P4511 | — | VDV10194, VEV10294, VCV10394 | Patch available | CNA |
| Solidigm | DC P4610 | — | VDV10194, VEV10294, VCV10394 | Patch available | CNA |
| Solidigm | D5-P4320 | — | VDV10194, VEV10294, VCV10394 | Patch available | CNA |
| Solidigm | D5-P4326 | — | VDV10194, VEV10294, VCV10394 | Patch available | CNA |
| Solidigm | DC P4511 | — | VDV10194, VEV10294, VCV10394 | Patch available | CNA |
- D7-P5500 VendorSolidigm Affected — Fixed in 1.3.0-2CV10300 Patch available CNA
- D7-P5600 VendorSolidigm Affected — Fixed in 2CV10C034, 1.3.0-2CV10300 Patch available CNA
- D5-P5316 VendorSolidigm Affected — Fixed in 1.0.4-ACV10060, ACV1MA10, ACV1R330 Patch available CNA
- D7-P5520 VendorSolidigm Affected — Fixed in 0.0.25-9CV10220, 9CV10410, 9CV1MA70, 9CV1R410 Patch available CNA
- D7-P5620 VendorSolidigm Affected — Fixed in 0.0.25-9CV10220, 9CV10410 Patch available CNA
- D7-P5628 VendorSolidigm Affected — Fixed in 9CV1R410 Patch available CNA
- DC P4510 VendorSolidigm Affected — Fixed in VDV10194, VEV10294, VCV10394 Patch available CNA
- DC P4511 VendorSolidigm Affected — Fixed in VDV10194, VEV10294, VCV10394 Patch available CNA
- DC P4610 VendorSolidigm Affected — Fixed in VDV10194, VEV10294, VCV10394 Patch available CNA
- D5-P4320 VendorSolidigm Affected — Fixed in VDV10194, VEV10294, VCV10394 Patch available CNA
- D5-P4326 VendorSolidigm Affected — Fixed in VDV10194, VEV10294, VCV10394 Patch available CNA
- DC P4511 VendorSolidigm Affected — Fixed in VDV10194, VEV10294, VCV10394 Patch available CNA
CPE names CISA-ADP · 11
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:solidigm:d7_p5520_firmware:*:*:*:*:*:*:*:* | — | — | Solidigm |
| cpe:2.3:o:solidigm:d7_p5500_firmware:*:*:*:*:*:*:*:* | — | — | Solidigm |
| cpe:2.3:o:solidigm:d7_p5600_firmware:*:*:*:*:*:*:*:* | — | — | Solidigm |
| cpe:2.3:o:solidigm:d5_p5316_firmware:*:*:*:*:*:*:*:* | — | — | Solidigm |
| cpe:2.3:o:solidigm:dc_p4510_firmware:*:*:*:*:*:*:*:* | — | — | Solidigm |
| cpe:2.3:o:solidigm:dc_p4610_firmware:*:*:*:*:*:*:*:* | — | — | Solidigm |
| cpe:2.3:o:solidigm:d7_p5628_firmware:*:*:*:*:*:*:*:* | — | — | Solidigm |
| cpe:2.3:o:solidigm:d7_p5620_firmware:*:*:*:*:*:*:*:* | — | — | Solidigm |
| cpe:2.3:o:solidigm:dc_p4511_firmware:*:*:*:*:*:*:*:* | — | — | Solidigm |
| cpe:2.3:o:solidigm:d5_p4320_firmware:*:*:*:*:*:*:*:* | — | — | Solidigm |
- cpe:2.3:o:solidigm:d7_p5520_firmware:*:*:*:*:*:*:*:* Versions — — ·Solidigm
- cpe:2.3:o:solidigm:d7_p5500_firmware:*:*:*:*:*:*:*:* Versions — — ·Solidigm
- cpe:2.3:o:solidigm:d7_p5600_firmware:*:*:*:*:*:*:*:* Versions — — ·Solidigm
- cpe:2.3:o:solidigm:d5_p5316_firmware:*:*:*:*:*:*:*:* Versions — — ·Solidigm
- cpe:2.3:o:solidigm:dc_p4510_firmware:*:*:*:*:*:*:*:* Versions — — ·Solidigm
- cpe:2.3:o:solidigm:dc_p4610_firmware:*:*:*:*:*:*:*:* Versions — — ·Solidigm
- cpe:2.3:o:solidigm:d7_p5628_firmware:*:*:*:*:*:*:*:* Versions — — ·Solidigm
- cpe:2.3:o:solidigm:d7_p5620_firmware:*:*:*:*:*:*:*:* Versions — — ·Solidigm
- cpe:2.3:o:solidigm:dc_p4511_firmware:*:*:*:*:*:*:*:* Versions — — ·Solidigm
- cpe:2.3:o:solidigm:d5_p4320_firmware:*:*:*:*:*:*:*:* Versions — — ·Solidigm
Remediation
- Fix · CNA D7-P5500 (Solidigm) Fixed in 1.3.0-2CV10300
- Fix · CNA D7-P5600 (Solidigm) Fixed in 2CV10C034, 1.3.0-2CV10300
- Fix · CNA D5-P5316 (Solidigm) Fixed in 1.0.4-ACV10060, ACV1MA10, ACV1R330
- Fix · CNA D7-P5520 (Solidigm) Fixed in 0.0.25-9CV10220, 9CV10410, 9CV1MA70, 9CV1R410
- Fix · CNA D7-P5620 (Solidigm) Fixed in 0.0.25-9CV10220, 9CV10410
- Fix · CNA D7-P5628 (Solidigm) Fixed in 9CV1R410
- Fix · CNA DC P4510 (Solidigm) Fixed in VDV10194, VEV10294, VCV10394
- Fix · CNA DC P4511 (Solidigm) Fixed in VDV10194, VEV10294, VCV10394
- Fix · CNA DC P4610 (Solidigm) Fixed in VDV10194, VEV10294, VCV10394
- Fix · CNA D5-P4320 (Solidigm) Fixed in VDV10194, VEV10294, VCV10394
- Fix · CNA D5-P4326 (Solidigm) Fixed in VDV10194, VEV10294, VCV10394
- Fix · CNA DC P4511 (Solidigm) Fixed in VDV10194, VEV10294, VCV10394
Timeline
- 2026-10-02 Threatist record created from CVE-2024-47975
- 2026-10-03 Alias added: GHSA-qf67-47q7-2f84
References
More Solidigm vulnerabilities
- TI-2024-32208 Improper access control in Solidigm DC P4510 CVSS 3.1MEDIUM 6.7
- TI-2024-32203 Improper error handling in firmware of some SSD DC Products may allow an attacker to enable denial of service. CVSS 3.1MEDIUM 6.5
- TI-2024-32202 Resource allocation without limits in Solidigm DC P4510 CVSS 3.1MEDIUM 6.2
- TI-2024-32205 In some Solidigm DC Products, a defect in device overprovisioning may provide information disclosure to an attacker. CVSS 3.1MEDIUM 5.1
- TI-2025-11820 Improper resource management in firmware of some Solidigm DC Products may allow an… CVSS 3.1MEDIUM 4.4
- TI-2025-11815 Missing brute-force protection in Solidigm D5-P5316, D7-P5510, D7-P5520/D7-P5620… CVSS 3.1MEDIUM 4.4
Sources
- CVE-2024-47975 · CVE Program
- CVE-2024-47975 · NVD
- FIRST EPSS
- GHSA-qf67-47q7-2f84 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences