CVE-2024-54084 — SMM Arbitrary Write via TOCTOU Vulnerability

CVE-2024-54084

SMM Arbitrary Write via TOCTOU Vulnerability PUBLISHED

Description (CNA)

APTIOV contains a vulnerability in BIOS where an attacker may cause a Time-of-check Time-of-use (TOCTOU) Race Condition by local means. Successful exploitation of this vulnerability may lead to arbitrary code execution.

Affected (CNA)

Vendor / product	Versions
AMI / AptioV	affected BKS_5.0 through BKS_5.38

CWE

CWE-367

References

https://go.ami.com/hubfs/Security%20Advisories/2025/AMI-SA-2025003.pdf

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.