CVE-2024-21939 — AMD / AMD Cloud Manageability Service Software

CVE-2024-21939

AMD / AMD Cloud Manageability Service Software PUBLISHED

Description (CNA)

Incorrect default permissions in the AMD Cloud Manageability Service (ACMS) Software installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution.

Affected (CNA)

Vendor / product	Versions
AMD / AMD Cloud Manageability Service Software	affected 0 before 2.0.0.232

CWE

CWE-276

References

https://www.amd.com/en/resources/product-security/bulletin/amd-sb-9006.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.