Skip to content
OpenAdvisories
Medium · 5.0 CVE-2024-21935 EUVD-2024-19541GHSA-pfx9-w6cc-q924

Improper input validation in Satellite Management Controller (SMC) may allow an attacker with privileges to manipulate Redfish® API command…

Published Sep 23, 2025 · Updated Sep 24, 2025 · Assigned by AMD

Description

Improper input validation in Satellite Management Controller (SMC) may allow an attacker with privileges to manipulate Redfish® API commands to remove files from the local root directory, potentially resulting in data corruption.

Affected products

VendorProductAffectedFixed
AMD AMD Instinct™ MI300X — BKC 24.10

References