CVE-2024-21938

Incorrect default permissions in the AMD Management Plugin for the Microsoft® System Center Configuration Manager SCCM installation directory could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution...

CVE-2024-21945

Incorrect default permissions in the AMD RyzenTM Master monitoring SDK installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution...

CVE-2024-21946

Incorrect default permissions in the AMD RyzenTM Master Utility installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution...

CVE-2024-21937

Incorrect default permissions in the AMD HIP SDK installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution...

CVE-2024-21958

Incorrect default permissions in the AMD Provisioning Console installation directory could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution...

CVE-2024-21958

Incorrect default permissions in the AMD Provisioning Console installation directory could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution...

CVE-2024-21958

CVE-2024-21958 concerns the AMD Provisioning Console, where incorrect default ACL permissions in the installation directory enable a local attacker with low privileges to escalate privileges, potentially achieve arbitrary code execution. The AMD bulletin describes the root cause as the installati...

CVE-2024-21957

Incorrect default permissions in the AMD Management Console installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution...

CVE-2024-21946

Incorrect default permissions in the AMD RyzenTM Master Utility installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution...

CVE-2024-21946

The CVE targets AMD Ryzen Master Utility installation directory permissions. Affected component: Ryzen Master/Monitoring SDK; root cause: incorrect default ACL permissions in installation folders and subfolders. Impact: local privilege escalation potentially leading to arbitrary code execution (h...

CVE-2024-21945

Summary: CVE-2024-21945 involves incorrect default ACL permissions in the AMD Ryzen Master Monitoring SDK installation directory, which could allow a low-privileged attacker to escalate privileges and potentially execute arbitrary code. The AMD bulletin AMD-SB-9004 documents the vulnerability wit...

CVE-2024-21945

Incorrect default permissions in the AMD RyzenTM Master monitoring SDK installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution...

CVE-2024-21945

Incorrect default permissions in the AMD RyzenTM Master monitoring SDK installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution...

CVE-2024-21939

CVE-2024-21939 concerns the AMD Cloud Manageability Service (ACMS). The connected AMD advisory documents indicate the issue stems from incorrect default ACL permissions in the ACMS Software installation directory, enabling a low-privileged local attacker to escalate privileges and potentially exe...

CVE-2024-21938

Incorrect default permissions in the AMD Management Plugin for the Microsoft® System Center Configuration Manager SCCM installation directory could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution...

AMD HIP SDK 安全漏洞

AMD HIP SDK is a software development kit SDK from UltraMicroelectronics AMD. A security vulnerability exists in the AMD HIP SDK that stems from incorrect default permissions. An attacker exploiting the vulnerability could achieve elevation of privilege, which could lead to arbitrary code executi...

AMD Provisioning Console 安全漏洞

AMD Provisioning Console is an application from UltraMicroelectronics AMD that is used to create configuration packages to configure systems that support AMD Integrated Management Technology AIM-T. AMD Provisioning Console has a security vulnerability that stems from incorrect default permissions...

AMD Cloud Manageability Service 安全漏洞

AMD Cloud Manageability Service is a software product within the AMD Manageability solution from UltraMicroelectronics AMD that enables IT administrators to manage AMD devices that are not on the corporate network. AMD Cloud Manageability Service has a security vulnerability that stems from...

AMD Ryzen Master 安全漏洞

AMD Ryzen Master is a software tool from UltraMicroelectronics AMD for managing and tuning the performance of AMD Ryzen processors. AMD Ryzen Master has a security vulnerability that stems from incorrect default permissions. An attacker exploiting this vulnerability could achieve elevation of...

Ryzen™ Master Monitoring SDK & AMD Ryzen™ Master Utility Incorrect Default Permission Vulnerabilities

Bulletin ID: AMD-SB-9004 Potential Impact: Incorrect Default Permissions Leading to Arbitrary Execution Severity: High Summary The AMD Ryzen™ Master Monitoring SDK is a public distribution that is designed to allow software developers to add processor and memory functions to their own utilities...