CVE-2024-21927

Improper input validation in Satellite Management Controller SMC may allow an attacker with privileges to use certain special characters in manipulated Redfish® API commands, causing service processes like OpenBMC to crash and reset, potentially resulting in denial of service...

CVE-2024-21935

Improper input validation in Satellite Management Controller SMC may allow an attacker with privileges to manipulate Redfish® API commands to remove files from the local root directory, potentially resulting in data corruption...

CVE-2024-21927

CVE-2024-21927 affects the Satellite Management Controller (SMC) firmware in AMD Instinct MI300X accelerators. The root cause is improper input validation in Redfish API commands, which could allow a privileged attacker to use certain special characters to crash and reset service processes like O...