USB SCSI READ(10) Command Vulnerability: Exposing Full RAM

CVE-2024-30212

What is CVE-2024-30212?

A vulnerability exists in Microchip's MPLAB Harmony where executing a SCSI READ(10) command via USB can potentially expose sensitive memory areas. By utilizing the maximum logical block address (LBA) and specifying a default block size and count, attackers can access the initial bytes of memory, with the risk of providing access to the entire RAM if the block count is increased. Furthermore, the same exploit can manipulate memory to write to designated areas. This can lead to unauthorized access to critical data and potentially compromise the integrity of applications by overwriting pointers, which may allow retrieval of information from program and boot flash memory.

References