Skip to content
NewA calmer, faster ZeroHour

CVE-2024-56161

CVSS 3.1
7.2 high
EPSS
<1%p43
Published
·
Modified
Analyze CVE-2024-56161 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Improper signature verification in AMD CPU ROM microcode patch loader may allow an attacker with local administrator privilege to load malicious CPU microcode resulting in loss of confidentiality and integrity of a confidential guest running under AMD SEV-SNP.

Weakness
CWE-347
Vector
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N

In the news

3 stories