CVE-2024-21924 - Vulnerability Details - OpenCVE

SMM callout vulnerability within the AmdPlatformRasSspSmm driver could allow a ring 0 attacker to modify boot services handlers, potentially resulting in arbitrary code execution.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required High

Scope Changed

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact total

No data.

No data.

No data.

References

Link	Providers
https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7028.html

History

Tue, 11 Feb 2025 21:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Tue, 11 Feb 2025 20:30:00 +0000

Type	Values Removed	Values Added
Description		SMM callout vulnerability within the AmdPlatformRasSspSmm driver could allow a ring 0 attacker to modify boot services handlers, potentially resulting in arbitrary code execution.
Weaknesses		CWE-250
References		https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7028.html
Metrics		cvssV3_1 `{'score': 8.2, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H'}`

MITRE

Status: PUBLISHED

Assigner: AMD

Published: 2025-02-11T20:18:50.402Z

Updated: 2025-02-11T20:52:32.535Z

Reserved: 2024-01-03T16:43:09.232Z

Link: CVE-2024-21924

Vulnrichment

Updated: 2025-02-11T20:52:27.369Z

NVD

Status : Received

Published: 2025-02-11T21:15:12.437

Modified: 2025-02-11T21:15:12.437

Link: CVE-2024-21924

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-21924", "assignerOrgId": "b58fc414-a1e4-4f92-9d70-1add41838648", "state": "PUBLISHED", "assignerShortName": "AMD", "dateReserved": "2024-01-03T16:43:09.232Z", "datePublished": "2025-02-11T20:18:50.402Z", "dateUpdated": "2025-02-11T20:52:32.535Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unknown", "product": "AMD EPYC\u2122 7002 Processors", "vendor": "AMD", "versions": [{"status": "unaffected", "version": "Rome PI 1.0.0.K"}]}, {"defaultStatus": "unknown", "product": "AMD Ryzen\u2122 Threadripper\u2122 PRO 3000WX Series Processors", "vendor": "AMD", "versions": [{"status": "unaffected", "version": "ChagallWSPI-sWRX8 1.0.0.9"}]}, {"defaultStatus": "unknown", "product": "AMD Ryzen\u2122 Threadripper\u2122 PRO 3000WX Series Processors", "vendor": "AMD", "versions": [{"status": "unaffected", "version": "CastlePeakWSPI-sWRX8 1.0.0.E"}]}, {"defaultStatus": "unknown", "product": "AMD Ryzen\u2122 Threadripper\u2122 PRO 5000WX- Series Desktop Processors", "vendor": "AMD", "versions": [{"status": "unaffected", "version": "ChagallWSPI-sWRX8 1.0.0.9"}]}, {"defaultStatus": "unknown", "product": "AMD Ryzen\u2122 Threadripper\u2122 PRO 7000 WX-Series Processors", "vendor": "AMD", "versions": [{"status": "unaffected", "version": "StormPeakPI-SP6 1.1.0.0h"}]}, {"defaultStatus": "unknown", "product": "AMD Ryzen\u2122 Threadripper\u2122 PRO 7000 WX-Series Processors", "vendor": "AMD", "versions": [{"status": "unaffected", "version": "StormPeakPI-SP6 1.0.0.1j"}]}, {"defaultStatus": "unknown", "product": "AMD EPYC\u2122 Embedded 7002 Processors", "vendor": "AMD", "versions": [{"status": "unaffected", "version": "EmbRomePI-SP3 1.0.0.D"}]}], "datePublic": "2025-02-11T17:00:00.000Z", "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "SMM callout vulnerability within the AmdPlatformRasSspSmm driver could allow a ring 0 attacker to modify boot services handlers, potentially resulting in arbitrary code execution."}], "value": "SMM callout vulnerability within the AmdPlatformRasSspSmm driver could allow a ring 0 attacker to modify boot services handlers, potentially resulting in arbitrary code execution."}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 8.2, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-250", "description": "CWE-250 Execution with Unnecessary Privileges", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "b58fc414-a1e4-4f92-9d70-1add41838648", "shortName": "AMD", "dateUpdated": "2025-02-11T20:18:50.402Z"}, "references": [{"url": "https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7028.html"}], "source": {"discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-02-11T20:52:10.826130Z", "id": "CVE-2024-21924", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-02-11T20:52:32.535Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-21924", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2025-02-11T20:52:10.826130Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-02-11T20:52:27.369Z"}}], "cna": {"source": {"discovery": "UNKNOWN"}, "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 8.2, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "AMD", "product": "AMD EPYC\u2122 7002 Processors", "versions": [{"status": "unaffected", "version": "Rome PI 1.0.0.K"}], "defaultStatus": "unknown"}, {"vendor": "AMD", "product": "AMD Ryzen\u2122 Threadripper\u2122 PRO 3000WX Series Processors", "versions": [{"status": "unaffected", "version": "ChagallWSPI-sWRX8 1.0.0.9"}], "defaultStatus": "unknown"}, {"vendor": "AMD", "product": "AMD Ryzen\u2122 Threadripper\u2122 PRO 3000WX Series Processors", "versions": [{"status": "unaffected", "version": "CastlePeakWSPI-sWRX8 1.0.0.E"}], "defaultStatus": "unknown"}, {"vendor": "AMD", "product": "AMD Ryzen\u2122 Threadripper\u2122 PRO 5000WX- Series Desktop Processors", "versions": [{"status": "unaffected", "version": "ChagallWSPI-sWRX8 1.0.0.9"}], "defaultStatus": "unknown"}, {"vendor": "AMD", "product": "AMD Ryzen\u2122 Threadripper\u2122 PRO 7000 WX-Series Processors", "versions": [{"status": "unaffected", "version": "StormPeakPI-SP6 1.1.0.0h"}], "defaultStatus": "unknown"}, {"vendor": "AMD", "product": "AMD Ryzen\u2122 Threadripper\u2122 PRO 7000 WX-Series Processors", "versions": [{"status": "unaffected", "version": "StormPeakPI-SP6 1.0.0.1j"}], "defaultStatus": "unknown"}, {"vendor": "AMD", "product": "AMD EPYC\u2122 Embedded 7002 Processors", "versions": [{"status": "unaffected", "version": "EmbRomePI-SP3 1.0.0.D"}], "defaultStatus": "unknown"}], "datePublic": "2025-02-11T17:00:00.000Z", "references": [{"url": "https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7028.html"}], "x_generator": {"engine": "Vulnogram 0.2.0"}, "descriptions": [{"lang": "en", "value": "SMM callout vulnerability within the AmdPlatformRasSspSmm driver could allow a ring 0 attacker to modify boot services handlers, potentially resulting in arbitrary code execution.", "supportingMedia": [{"type": "text/html", "value": "SMM callout vulnerability within the AmdPlatformRasSspSmm driver could allow a ring 0 attacker to modify boot services handlers, potentially resulting in arbitrary code execution.", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-250", "description": "CWE-250 Execution with Unnecessary Privileges"}]}], "providerMetadata": {"orgId": "b58fc414-a1e4-4f92-9d70-1add41838648", "shortName": "AMD", "dateUpdated": "2025-02-11T20:18:50.402Z"}}}, "cveMetadata": {"cveId": "CVE-2024-21924", "state": "PUBLISHED", "dateUpdated": "2025-02-11T20:52:32.535Z", "dateReserved": "2024-01-03T16:43:09.232Z", "assignerOrgId": "b58fc414-a1e4-4f92-9d70-1add41838648", "datePublished": "2025-02-11T20:18:50.402Z", "assignerShortName": "AMD"}, "dataVersion": "5.1"}