Improper access control in Solidigm DC P4510
Priority LOW 31CWE-284Published · Updated
Key facts
- Attack vector
- Physical
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- High
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- High · High · None
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-284.
Summary
Improper access removal handling in firmware of some Solidigm DC Products may allow an attacker with physical access to gain unauthorized access.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00156 4th percentileScored 2026-11-07
Fix Fixed DC P4510 (Solidigm): VDV10194, VEV10294, VCV10394DC P4610 (Solidigm): VCV10394, VEV10294, VDV10194+10 more products
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Solidigm | DC P4510 | — | VDV10194, VEV10294, VCV10394 | Patch available | CNA |
| Solidigm | DC P4610 | — | VCV10394, VEV10294, VDV10194 | Patch available | CNA |
| Solidigm | D7-P5500 | — | 2CV10C034 | Patch available | CNA |
| Solidigm | D7-P5600 | — | 2CV10C034 | Patch available | CNA |
| Solidigm | D5-P5316 | — | ACV1R330, ACV1MA10, ACV10340 | Patch available | CNA |
| Solidigm | D7-P5520 | — | 9CV1R410, 9CV1MA70, 9CV10410, 0.0.25-9CV10220 | Patch available | CNA |
| Solidigm | D7-P5620 | — | 9CV10410, 0.0.25-9CV10220 | Patch available | CNA |
| Solidigm | DC P4511 | — | VDV10194, VEV10294, VCV10394 | Patch available | CNA |
| Solidigm | D5-P4320 | — | VDV10194, VEV10294, VCV10394 | Patch available | CNA |
| Solidigm | D5-P4326 | — | VCV10394, VEV10294, VDV10194 | Patch available | CNA |
| Solidigm | D7-P5510 | — | JCV10404 | Patch available | CNA |
| Solidigm | D7-P5628 | — | 9CV1R410 | Patch available | CNA |
- DC P4510 VendorSolidigm Affected — Fixed in VDV10194, VEV10294, VCV10394 Patch available CNA
- DC P4610 VendorSolidigm Affected — Fixed in VCV10394, VEV10294, VDV10194 Patch available CNA
- D7-P5500 VendorSolidigm Affected — Fixed in 2CV10C034 Patch available CNA
- D7-P5600 VendorSolidigm Affected — Fixed in 2CV10C034 Patch available CNA
- D5-P5316 VendorSolidigm Affected — Fixed in ACV1R330, ACV1MA10, ACV10340 Patch available CNA
- D7-P5520 VendorSolidigm Affected — Fixed in 9CV1R410, 9CV1MA70, 9CV10410, 0.0.25-9CV10220 Patch available CNA
- D7-P5620 VendorSolidigm Affected — Fixed in 9CV10410, 0.0.25-9CV10220 Patch available CNA
- DC P4511 VendorSolidigm Affected — Fixed in VDV10194, VEV10294, VCV10394 Patch available CNA
- D5-P4320 VendorSolidigm Affected — Fixed in VDV10194, VEV10294, VCV10394 Patch available CNA
- D5-P4326 VendorSolidigm Affected — Fixed in VCV10394, VEV10294, VDV10194 Patch available CNA
- D7-P5510 VendorSolidigm Affected — Fixed in JCV10404 Patch available CNA
- D7-P5628 VendorSolidigm Affected — Fixed in 9CV1R410 Patch available CNA
CPE names CISA-ADP · 12
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:solidigm:d7_p5500_firmware:*:*:*:*:*:*:*:* | — | — | Solidigm |
| cpe:2.3:o:solidigm:d7_p5600_firmware:*:*:*:*:*:*:*:* | — | — | Solidigm |
| cpe:2.3:o:solidigm:d5_p5316_firmware:*:*:*:*:*:*:*:* | — | — | Solidigm |
| cpe:2.3:o:solidigm:dc_p4510_firmware:*:*:*:*:*:*:*:* | — | — | Solidigm |
| cpe:2.3:o:solidigm:d7_p5620_firmware:*:*:*:*:*:*:*:* | — | — | Solidigm |
| cpe:2.3:o:solidigm:d7_p5628_firmware:*:*:*:*:*:*:*:* | — | — | Solidigm |
| cpe:2.3:o:solidigm:dc_p4610_firmware:*:*:*:*:*:*:*:* | — | — | Solidigm |
| cpe:2.3:o:solidigm:d7_p5520_firmware:*:*:*:*:*:*:*:* | — | — | Solidigm |
| cpe:2.3:o:solidigm:dc_p4511_firmware:*:*:*:*:*:*:*:* | — | — | Solidigm |
| cpe:2.3:o:solidigm:d5_p4320_firmware:*:*:*:*:*:*:*:* | — | — | Solidigm |
- cpe:2.3:o:solidigm:d7_p5500_firmware:*:*:*:*:*:*:*:* Versions — — ·Solidigm
- cpe:2.3:o:solidigm:d7_p5600_firmware:*:*:*:*:*:*:*:* Versions — — ·Solidigm
- cpe:2.3:o:solidigm:d5_p5316_firmware:*:*:*:*:*:*:*:* Versions — — ·Solidigm
- cpe:2.3:o:solidigm:dc_p4510_firmware:*:*:*:*:*:*:*:* Versions — — ·Solidigm
- cpe:2.3:o:solidigm:d7_p5620_firmware:*:*:*:*:*:*:*:* Versions — — ·Solidigm
- cpe:2.3:o:solidigm:d7_p5628_firmware:*:*:*:*:*:*:*:* Versions — — ·Solidigm
- cpe:2.3:o:solidigm:dc_p4610_firmware:*:*:*:*:*:*:*:* Versions — — ·Solidigm
- cpe:2.3:o:solidigm:d7_p5520_firmware:*:*:*:*:*:*:*:* Versions — — ·Solidigm
- cpe:2.3:o:solidigm:dc_p4511_firmware:*:*:*:*:*:*:*:* Versions — — ·Solidigm
- cpe:2.3:o:solidigm:d5_p4320_firmware:*:*:*:*:*:*:*:* Versions — — ·Solidigm
Remediation
- Fix · CNA DC P4510 (Solidigm) Fixed in VDV10194, VEV10294, VCV10394
- Fix · CNA DC P4610 (Solidigm) Fixed in VCV10394, VEV10294, VDV10194
- Fix · CNA D7-P5500 (Solidigm) Fixed in 2CV10C034
- Fix · CNA D7-P5600 (Solidigm) Fixed in 2CV10C034
- Fix · CNA D5-P5316 (Solidigm) Fixed in ACV1R330, ACV1MA10, ACV10340
- Fix · CNA D7-P5520 (Solidigm) Fixed in 9CV1R410, 9CV1MA70, 9CV10410, 0.0.25-9CV10220
- Fix · CNA D7-P5620 (Solidigm) Fixed in 9CV10410, 0.0.25-9CV10220
- Fix · CNA DC P4511 (Solidigm) Fixed in VDV10194, VEV10294, VCV10394
- Fix · CNA D5-P4320 (Solidigm) Fixed in VDV10194, VEV10294, VCV10394
- Fix · CNA D5-P4326 (Solidigm) Fixed in VCV10394, VEV10294, VDV10194
- Fix · CNA D7-P5510 (Solidigm) Fixed in JCV10404
- Fix · CNA D7-P5628 (Solidigm) Fixed in 9CV1R410
Timeline
- 2026-10-02 Threatist record created from CVE-2024-47976
- 2026-10-03 Alias added: GHSA-x834-53jc-rjr9
References
More Solidigm vulnerabilities
- TI-2024-32207 Improper access control in Solidigm D7-P5500 CVSS 3.1HIGH 7.0
- TI-2024-32203 Improper error handling in firmware of some SSD DC Products may allow an attacker to enable denial of service. CVSS 3.1MEDIUM 6.5
- TI-2024-32202 Resource allocation without limits in Solidigm DC P4510 CVSS 3.1MEDIUM 6.2
- TI-2024-32205 In some Solidigm DC Products, a defect in device overprovisioning may provide information disclosure to an attacker. CVSS 3.1MEDIUM 5.1
- TI-2025-11820 Improper resource management in firmware of some Solidigm DC Products may allow an… CVSS 3.1MEDIUM 4.4
- TI-2025-11815 Missing brute-force protection in Solidigm D5-P5316, D7-P5510, D7-P5520/D7-P5620… CVSS 3.1MEDIUM 4.4
Sources
- CVE-2024-47976 · CVE Program
- CVE-2024-47976 · NVD
- FIRST EPSS
- GHSA-x834-53jc-rjr9 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences