CVE-2024-21935 — AMD / AMD Instinct™ MI300X

CVE-2024-21935

AMD / AMD Instinct™ MI300X PUBLISHED

Description (CNA)

Improper input validation in Satellite Management Controller (SMC) may allow an attacker with privileges to manipulate Redfish® API commands to remove files from the local root directory, potentially resulting in data corruption.

Affected (CNA)

Vendor / product	Versions
AMD / AMD Instinct™ MI300X	unaffected BKC 24.10

CWE

CWE-241

References

https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-6016.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.