CVE-2024-42442 — Runtime Service Access outside SMRAM

CVE-2024-42442

Runtime Service Access outside SMRAM PUBLISHED

Description (CNA)

APTIOV contains a vulnerability in the BIOS where a user or attacker may cause an improper restriction of operations within the bounds of a memory buffer over the network. A successful exploitation of this vulnerability may lead to code execution outside of the intended System Management Mode.

Affected (CNA)

Vendor / product	Versions
AMI / AptioV	affected BKS_5.0 through BKS_5.37

CWE

CWE-119

References

https://9443417.fs1.hubspotusercontent-na1.net/hubfs/9443417/Security%20Advisories/2024/AMI-SA-2024004.pdf

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.