Vulnerability-Lookup

WID-SEC-W-2024-3650

Vulnerability from csaf_certbund - Published: 2024-12-10 23:00 - Updated: 2024-12-10 23:00

Summary

AMD Prozessoren: Schwachstelle ermöglicht Manipulation von Daten

Severity

Mittel

Notes

Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.

Produktbeschreibung: Prozessoren sind die zentralen Rechenwerke eines Computers.

Angriff: Ein lokaler Angreifer kann eine Schwachstelle in AMD Prozessoren ausnutzen, um Daten zu manipulieren.

Betroffene Betriebssysteme: - BIOS/Firmware

CVE-2024-21944

Es besteht eine Schwachstelle in AMD Prozessoren. Durch eine unsachgemäße Eingabevalidierung von DIMM Serial Presence Detect (SPD) kann Gastspeicher überschrieben werden. Ein lokaler Angreifer kann diese Schwachstelle ausnutzen, um den Speicher zu manipulieren. Um die Schwachstelle erfolgreich auszunutzen, muss der Angreifer entweder physischen Zugriff oder Zugriff auf Ring0-Ebene auf einem System mit einem nicht konformen DIMM oder die Kontrolle über die Vertrauensbasis für BIOS-Updates haben.

Affected products

Known affected 8 products

Product	Identifier	Version
Dell PowerEdge Dell	`cpe:/h:dell:poweredge:-`	—
AMD Prozessor Genoa AMD / Prozessor	`cpe:/h:amd:amd_processor:genoa`	Genoa
AMD Prozessor Bergamo AMD / Prozessor	`cpe:/h:amd:amd_processor:bergamo`	Bergamo
AMD Prozessor Genoa-X AMD / Prozessor	`cpe:/h:amd:amd_processor:genoa-x`	Genoa-X
AMD Prozessor Milan-X AMD / Prozessor	`cpe:/h:amd:amd_processor:milan-x`	Milan-X
AMD Prozessor Milan AMD / Prozessor	`cpe:/h:amd:amd_processor:milan`	Milan
Lenovo BIOS Lenovo	`cpe:/h:lenovo:bios:-`	—
AMD Prozessor Siena AMD / Prozessor	`cpe:/h:amd:amd_processor:siena`	Siena

References

5 references

URL	Category
https://wid.cert-bund.de/.well-known/csaf/white/2…	self
https://wid.cert-bund.de/portal/wid/securityadvis…	self
https://www.amd.com/en/resources/product-security…	external
https://support.lenovo.com/us/en/product_security…	external
https://www.dell.com/support/kbdoc/de-de/00025873…	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "text": "mittel"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "Prozessoren sind die zentralen Rechenwerke eines Computers.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein lokaler Angreifer kann eine Schwachstelle in AMD Prozessoren ausnutzen, um Daten zu manipulieren.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- BIOS/Firmware",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2024-3650 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-3650.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2024-3650 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-3650"
      },
      {
        "category": "external",
        "summary": "AMD Security Bulletin AMD-SB-3015 vom 2024-12-10",
        "url": "https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3015.html"
      },
      {
        "category": "external",
        "summary": "Lenovo Security Advisory LEN-180503 vom 2024-12-10",
        "url": "https://support.lenovo.com/us/en/product_security/LEN-180503"
      },
      {
        "category": "external",
        "summary": "Dell Security Advisory DSA-2024-404 vom 2024-12-10",
        "url": "https://www.dell.com/support/kbdoc/de-de/000258735/dsa-2024-404-security-update-for-dell-amd-based-poweredge-server-vulnerabilities"
      }
    ],
    "source_lang": "en-US",
    "title": "AMD Prozessoren: Schwachstelle erm\u00f6glicht Manipulation von Daten",
    "tracking": {
      "current_release_date": "2024-12-10T23:00:00.000+00:00",
      "generator": {
        "date": "2024-12-11T09:41:59.130+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.3.10"
        }
      },
      "id": "WID-SEC-W-2024-3650",
      "initial_release_date": "2024-12-10T23:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2024-12-10T23:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "Milan",
                "product": {
                  "name": "AMD Prozessor Milan",
                  "product_id": "T039668",
                  "product_identification_helper": {
                    "cpe": "cpe:/h:amd:amd_processor:milan"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "Milan-X",
                "product": {
                  "name": "AMD Prozessor Milan-X",
                  "product_id": "T039669",
                  "product_identification_helper": {
                    "cpe": "cpe:/h:amd:amd_processor:milan-x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "Genoa",
                "product": {
                  "name": "AMD Prozessor Genoa",
                  "product_id": "T039670",
                  "product_identification_helper": {
                    "cpe": "cpe:/h:amd:amd_processor:genoa"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "Genoa-X",
                "product": {
                  "name": "AMD Prozessor Genoa-X",
                  "product_id": "T039671",
                  "product_identification_helper": {
                    "cpe": "cpe:/h:amd:amd_processor:genoa-x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "Bergamo",
                "product": {
                  "name": "AMD Prozessor Bergamo",
                  "product_id": "T039672",
                  "product_identification_helper": {
                    "cpe": "cpe:/h:amd:amd_processor:bergamo"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "Siena",
                "product": {
                  "name": "AMD Prozessor Siena",
                  "product_id": "T039673",
                  "product_identification_helper": {
                    "cpe": "cpe:/h:amd:amd_processor:siena"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Prozessor"
          }
        ],
        "category": "vendor",
        "name": "AMD"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Dell PowerEdge",
            "product": {
              "name": "Dell PowerEdge",
              "product_id": "T036715",
              "product_identification_helper": {
                "cpe": "cpe:/h:dell:poweredge:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Dell"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Lenovo BIOS",
            "product": {
              "name": "Lenovo BIOS",
              "product_id": "T033443",
              "product_identification_helper": {
                "cpe": "cpe:/h:lenovo:bios:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Lenovo"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2024-21944",
      "notes": [
        {
          "category": "description",
          "text": "Es besteht eine Schwachstelle in AMD Prozessoren. Durch eine unsachgem\u00e4\u00dfe Eingabevalidierung von DIMM Serial Presence Detect (SPD) kann Gastspeicher \u00fcberschrieben werden. Ein lokaler Angreifer kann diese Schwachstelle ausnutzen, um den Speicher zu manipulieren. Um die Schwachstelle erfolgreich auszunutzen, muss der Angreifer entweder physischen Zugriff oder Zugriff auf Ring0-Ebene auf einem System mit einem nicht konformen DIMM oder die Kontrolle \u00fcber die Vertrauensbasis f\u00fcr BIOS-Updates haben."
        }
      ],
      "product_status": {
        "known_affected": [
          "T036715",
          "T039670",
          "T039672",
          "T039671",
          "T039669",
          "T039668",
          "T033443",
          "T039673"
        ]
      },
      "release_date": "2024-12-10T23:00:00.000+00:00",
      "title": "CVE-2024-21944"
    }
  ]
}

CVE-2024-21944 (GCVE-0-2024-21944)

Vulnerability from cvelistv5 – Published: 2026-06-10 21:54 – Updated: 2026-06-11 13:28

Summary

Improper input validation for DIMM serial presence detect (SPD) metadata could allow an attacker with physical access, ring0 access on a system with a non-compliant DIMM, or control over the Root of Trust for BIOS update, to potentially overwrite guest memory resulting in loss of guest data integrity.

Severity

5.3 (Medium)


                        
                          CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-20 - Improper input validation

Assigner

AMD

References

1 reference

URL	Tags
https://www.amd.com/en/resources/product-security…

Impacted products

2 products

Vendor	Product	Version
AMD	AMD EPYC™ 7003 Series Processors	Unaffected: Milan PI 1.0.0.D Unaffected: SEV FW 1.55.22 (hex 1.37.16)
AMD	AMD EPYC™ 9004 Series Processor	Unaffected: Genoa PI 1.0.0.D Unaffected: SEV FW 1.55.38 (hex 1.37.26)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-21944",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-06-11T13:27:57.865423Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-06-11T13:28:14.229Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "affected",
          "product": "AMD EPYC\u2122 7003 Series Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "Milan PI 1.0.0.D"
            },
            {
              "status": "unaffected",
              "version": "SEV FW 1.55.22 (hex 1.37.16)"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD EPYC\u2122 9004 Series Processor",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "Genoa PI 1.0.0.D"
            },
            {
              "status": "unaffected",
              "version": "SEV FW 1.55.38 (hex 1.37.26)"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Improper input validation for DIMM serial presence detect (SPD) metadata could allow an attacker with physical access, ring0 access on a system with a non-compliant DIMM, or control over the Root of Trust for BIOS update, to potentially overwrite guest memory resulting in loss of guest data integrity."
            }
          ],
          "value": "Improper input validation for DIMM serial presence detect (SPD) metadata could allow an attacker with physical access, ring0 access on a system with a non-compliant DIMM, or control over the Root of Trust for BIOS update, to potentially overwrite guest memory resulting in loss of guest data integrity."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-20",
              "description": "CWE-20 Improper input validation",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-10T21:54:19.444Z",
        "orgId": "b58fc414-a1e4-4f92-9d70-1add41838648",
        "shortName": "AMD"
      },
      "references": [
        {
          "url": "https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3015.html"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "x_generator": {
        "engine": "Vulnogram 1.0.2"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "b58fc414-a1e4-4f92-9d70-1add41838648",
    "assignerShortName": "AMD",
    "cveId": "CVE-2024-21944",
    "datePublished": "2026-06-10T21:54:19.444Z",
    "dateReserved": "2024-01-03T16:43:21.322Z",
    "dateUpdated": "2026-06-11T13:28:14.229Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

WID-SEC-W-2024-3650

CVE-2024-21944 (GCVE-0-2024-21944)

Tags

Sightings

Nomenclature