Логотип exploitDog
bind:CVE-2024-36347
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2024-36347

Количество 6

Количество 6

ubuntu логотип

CVE-2024-36347

8 месяцев назад

Improper signature verification in AMD CPU ROM microcode patch loader may allow an attacker with local administrator privilege to load malicious microcode, potentially resulting in loss of integrity of x86 instruction execution, loss of confidentiality and integrity of data in x86 CPU privileged context and compromise of SMM execution environment.

CVSS3: 6.4
EPSS: Низкий
redhat логотип

CVE-2024-36347

11 месяцев назад

Improper signature verification in AMD CPU ROM microcode patch loader may allow an attacker with local administrator privilege to load malicious microcode, potentially resulting in loss of integrity of x86 instruction execution, loss of confidentiality and integrity of data in x86 CPU privileged context and compromise of SMM execution environment.

CVSS3: 7.5
EPSS: Низкий
nvd логотип

CVE-2024-36347

8 месяцев назад

Improper signature verification in AMD CPU ROM microcode patch loader may allow an attacker with local administrator privilege to load malicious microcode, potentially resulting in loss of integrity of x86 instruction execution, loss of confidentiality and integrity of data in x86 CPU privileged context and compromise of SMM execution environment.

CVSS3: 6.4
EPSS: Низкий
debian логотип

CVE-2024-36347

8 месяцев назад

Improper signature verification in AMD CPU ROM microcode patch loader ...

CVSS3: 6.4
EPSS: Низкий
github логотип

GHSA-fxg4-qp5q-79p3

8 месяцев назад

Improper signature verification in AMD CPU ROM microcode patch loader may allow an attacker with local administrator privilege to load malicious microcode, potentially resulting in loss of integrity of x86 instruction execution, loss of confidentiality and integrity of data in x86 CPU privileged context and compromise of SMM execution environment.

CVSS3: 6.4
EPSS: Низкий
fstec логотип

BDU:2025-02410

больше 1 года назад

Уязвимость загрузчика обновлений микропрограммного обеспечения процессоров AMD связана с неправильной проверкой криптографической подписи. Эксплуатация уязвимости может позволить нарушителю выполнить произвольный код и отключить защиту System Management Mode (SMM)

CVSS3: 6.4
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2024-36347

Improper signature verification in AMD CPU ROM microcode patch loader may allow an attacker with local administrator privilege to load malicious microcode, potentially resulting in loss of integrity of x86 instruction execution, loss of confidentiality and integrity of data in x86 CPU privileged context and compromise of SMM execution environment.

CVSS3: 6.4
0%
Низкий
8 месяцев назад
redhat логотип
CVE-2024-36347

Improper signature verification in AMD CPU ROM microcode patch loader may allow an attacker with local administrator privilege to load malicious microcode, potentially resulting in loss of integrity of x86 instruction execution, loss of confidentiality and integrity of data in x86 CPU privileged context and compromise of SMM execution environment.

CVSS3: 7.5
0%
Низкий
11 месяцев назад
nvd логотип
CVE-2024-36347

Improper signature verification in AMD CPU ROM microcode patch loader may allow an attacker with local administrator privilege to load malicious microcode, potentially resulting in loss of integrity of x86 instruction execution, loss of confidentiality and integrity of data in x86 CPU privileged context and compromise of SMM execution environment.

CVSS3: 6.4
0%
Низкий
8 месяцев назад
debian логотип
CVE-2024-36347

Improper signature verification in AMD CPU ROM microcode patch loader ...

CVSS3: 6.4
0%
Низкий
8 месяцев назад
github логотип
GHSA-fxg4-qp5q-79p3

Improper signature verification in AMD CPU ROM microcode patch loader may allow an attacker with local administrator privilege to load malicious microcode, potentially resulting in loss of integrity of x86 instruction execution, loss of confidentiality and integrity of data in x86 CPU privileged context and compromise of SMM execution environment.

CVSS3: 6.4
0%
Низкий
8 месяцев назад
fstec логотип
BDU:2025-02410

Уязвимость загрузчика обновлений микропрограммного обеспечения процессоров AMD связана с неправильной проверкой криптографической подписи. Эксплуатация уязвимости может позволить нарушителю выполнить произвольный код и отключить защиту System Management Mode (SMM)

CVSS3: 6.4
0%
Низкий
больше 1 года назад

Уязвимостей на страницу