Microchip Mplab Harmony vulnerabilities

2 CVEs affecting Microchip Mplab Harmony, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-30212, published 2024-05-28.

More from Microchip.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2020-17441, published 2020-12-11. Critical severity, CVSS 9.1. EPSS: 7% chance of exploitation in the next 30 days. An issue was discovered in picoTCP 1.7.0. The code for processing the IPv6 headers does not validate whether the IPv6 payload length field is equal to the actual size of the payload, which leads to…
• CVE-2024-30212, published 2024-05-28. High severity, CVSS 7.0. EPSS: 0.6% chance of exploitation in the next 30 days. If a SCSI READ(10) command is initiated via USB using the largest LBA (0xFFFFFFFF) with it's default block size of 512 and a count of 1, the first 512 byte of the 0x80000000 memory area is returned…