CVE-2024-21939

Published: Nov 12, 2024Modified: Jun 17, 2026

7.3

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Exploitability: 1.3 / Impact: 5.9

Source: NVD

Description

Incorrect default permissions in the AMD Cloud Manageability Service (ACMS) Software installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution.

Affected (1)

Products: Amd: Cloud Manageability Service

Amd

1 product

Cloud Manageability Service

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Amd Cloud Manageability Service	Before 2.0.0.232

Related CWEs

CWE-276

Incorrect Default Permissions

During installation, installed file permissions are set to allow anyone to modify those files.

References (1)

https://www.amd.com/en/resources/product-security/bulletin/amd-sb-9006.html

Source: psirt@amd.com

Vendor Advisory

Timeline

No history available yet.