CVE-2024-36347
Last modified
CVE-2024-36347 is a medium-severity vulnerability rated 6.4/10 on the CVSS scale. Improper signature verification in AMD CPU ROM microcode patch loader may allow an attacker with local administrator privilege to load malicious microcode, potentially resulting in loss of integrity of x86 instruction execution, loss of confidentiality and integrity of data in x86 CPU privileged context and compromise of SMM execution environment.. EPSS estimates a 0.10% chance of exploitation in the next 30 days.
Description
Improper signature verification in AMD CPU ROM microcode patch loader may allow an attacker with local administrator privilege to load malicious microcode, potentially resulting in loss of integrity of x86 instruction execution, loss of confidentiality and integrity of data in x86 CPU privileged context and compromise of SMM execution environment.
Metrics
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2024-36347?
How severe is CVE-2024-36347?
How do I fix CVE-2024-36347?
How Strix Helps
- Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2024
- CVE-2024-3634The month name translation benaceur WordPress plugin before …4.8
- CVE-2024-36340A junction point vulnerability within AMD uProf can allow a…6.6
- CVE-2024-36342Improper input validation in the GPU driver could allow an a…8.8
- CVE-2024-36343Improper input validation in the System Management Mode (SMM…4.6
- CVE-2024-36345Improper input validation in the AMD OverDrive (AOD) System …4.6
- CVE-2024-36346Improper input validation in AMD Power Management Firmware (…6
- CVE-2024-36348A transient execution vulnerability in some AMD processors m…3.8
- CVE-2024-36349A transient execution vulnerability in some AMD processors m…3.8
- CVE-2024-3635The Post Grid WordPress plugin before 7.5.0 does not saniti…4.8
- CVE-2024-36350A transient execution vulnerability in some AMD processors m…5.6
- CVE-2024-36352Improper input validation in the AMD Graphics Driver could a…8.4
- CVE-2024-36353Insufficient clearing of GPU global memory could allow a mal…6.5
Are you affected by CVE-2024-36347?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST