Skip to content
OpenAdvisories
Medium · 5.0 CVE-2024-21927 EUVD-2024-19533GHSA-x6w7-m2cm-96c3

Improper input validation in Satellite Management Controller (SMC) may allow an attacker with privileges to use certain special characters …

Published Sep 23, 2025 · Updated Sep 24, 2025 · Assigned by AMD

Description

Improper input validation in Satellite Management Controller (SMC) may allow an attacker with privileges to use certain special characters in manipulated Redfish® API commands, causing service processes like OpenBMC to crash and reset, potentially resulting in denial of service.

Affected products

VendorProductAffectedFixed
AMD AMD Instinct™ MI300X — BKC 24.08

References