Microchip · Mplab® Harmony 3 Core Module · CVE-2024-30212
**Name of the Vulnerable Software and Affected Versions**
No specific software or versions are mentioned in the provided descriptions.
**Description**
The issue allows an attacker to expose and potentially overwrite the full RAM by initiating a SCSI READ(10) command via USB with the largest LBA (0xFFFFFFFF) and a default block size of 512. Increasing the block count can lead to full RAM exposure. The same method can be used to write to this memory area, potentially allowing an attacker to overwrite pointers in RAM and return data from any other offset, including Program and Boot Flash.
**Recommendations**
At the moment, there is no information about a newer version that contains a fix for this vulnerability.