CVE-2024-21938

Published: Nov 12, 2024Modified: Jun 17, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

Incorrect default permissions in the AMD Management Plugin for the Microsoft® System Center Configuration Manager (SCCM) installation directory could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution.

Affected (1)

Products: Amd: Management Plugin For Sccm

1 product

Management Plugin For Sccm

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Amd Management Plugin For Sccm	Before 7.0.0.1318

Related CWEs

Incorrect Default Permissions

During installation, installed file permissions are set to allow anyone to modify those files.

References (1)

https://www.amd.com/en/resources/product-security/bulletin/amd-sb-9005.html

Source: psirt@amd.com

Vendor Advisory

Timeline

No history available yet.