CVE-2023-31359

Summary

Incorrect default permissions in the AMD Manageability API could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution.

Affected Software

Weaknesses

• CWE-276: CWE-276 Incorrect Default Permissions

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: total

References

• https://www.amd.com/en/resources/product-security/bulletin/amd-sb-9015.html

• ←Previous
• Next→