High · 7.3 CVE-2024-21958 EUVD-2024-19564GHSA-cx2c-rv87-9m6p

Incorrect default permissions in the AMD Provisioning Console installation directory could allow an attacker to achieve privilege escalatio…

Published Nov 12, 2024 · Updated Nov 14, 2024 · Assigned by AMD

Vendor: AMD Product: AMD Provisioning Console (APC) Software

Description

Incorrect default permissions in the AMD Provisioning Console installation directory could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution.

Affected products

Vendor	Product	Affected	Fixed
AMD	AMD Provisioning Console (APC) Software	< 4.0.0.408	4.0.0.408

References

https://www.amd.com/en/resources/product-security/bulletin/amd-sb-9007.html