CVE-2023-31358
7.8
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: NVD
Description
A DLL hijacking vulnerability in the AMD Manageability API could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution.
Affected (1)
Products: Amd: Aim T Manageability Api
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Before 6.0.0.2234 |
Related CWEs
CWE-276
Incorrect Default Permissions
During installation, installed file permissions are set to allow anyone to modify those files.
CWE-427
Uncontrolled Search Path Element
The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.
References (1)
Source: psirt@amd.com
Vendor Advisory
Timeline
No history available yet.