CVE-2024-21938 — AMD / AMD Management Plug-In for SCCM

CVE-2024-21938

AMD / AMD Management Plug-In for SCCM PUBLISHED

Description (CNA)

Incorrect default permissions in the AMD Management Plugin for the Microsoft® System Center Configuration Manager (SCCM) installation directory could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution.

Affected (CNA)

Vendor / product	Versions
AMD / AMD Management Plug-In for SCCM	affected 0 before 7.0.0.1318

CWE

CWE-276

References

https://www.amd.com/en/resources/product-security/bulletin/amd-sb-9005.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.