CVE-2024-21927 — AMD / AMD Instinct™ MI300X

CVE-2024-21927

AMD / AMD Instinct™ MI300X PUBLISHED

Description (CNA)

Improper input validation in Satellite Management Controller (SMC) may allow an attacker with privileges to use certain special characters in manipulated Redfish® API commands, causing service processes like OpenBMC to crash and reset, potentially resulting in denial of service.

Affected (CNA)

Vendor / product	Versions
AMD / AMD Instinct™ MI300X	unaffected BKC 24.08

CWE

CWE-241

References

https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-6016.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.