CVE-2024-56161
Last modified
CVE-2024-56161 is a high-severity vulnerability rated 7.2/10 on the CVSS scale. Improper signature verification in AMD CPU ROM microcode patch loader may allow an attacker with local administrator privilege to load malicious CPU microcode resulting in loss of confidentiality and integrity of a confidential guest running under AMD SEV-SNP.. EPSS estimates a 0.52% chance of exploitation in the next 30 days.
Description
Improper signature verification in AMD CPU ROM microcode patch loader may allow an attacker with local administrator privilege to load malicious CPU microcode resulting in loss of confidentiality and integrity of a confidential guest running under AMD SEV-SNP.
Metrics
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N
Weakness Enumeration
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2024-56161?
How severe is CVE-2024-56161?
How do I fix CVE-2024-56161?
How Strix Helps
- Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2024
- CVE-2024-5615The Open Graph plugin for WordPress is vulnerable to Sensiti…5.3
- CVE-2024-56156Halo is an open source website building tool. Prior to versi…9
- CVE-2024-56157iTop is an web based IT Service Management tool. Prior to ve…6.3
- CVE-2024-56158XWiki is a generic wiki platform. It's possible to execute a…9.8
- CVE-2024-56159Astro is a web framework for content-driven websites. A bug …5.3
- CVE-2024-5616A Cross-Site Request Forgery (CSRF) vulnerability exists in …4.3
- CVE-2024-56169A validation integrity issue was discovered in Fort through …5.3
- CVE-2024-56170A validation integrity issue was discovered in Fort through …5.3
- CVE-2024-56171libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a use-af…9.8
- CVE-2024-56173In Optimizely Configured Commerce before 5.2.2408, malicious…4.7
- CVE-2024-56174In Optimizely Configured Commerce before 5.2.2408, malicious…8.1
- CVE-2024-56175In Optimizely Configured Commerce before 5.2.2408, malicious…6.1
Are you affected by CVE-2024-56161?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST