Description
An exploit is possible where an actor with physical access can manipulate SPI flash without being detected.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| AMI | AptioV | BKS_5.0 – ≤ BKS_5.37 | — |
Medium · 5.2
CVE-2024-33660
EUVD-2024-31376GHSA-vgj5-pm4f-q6gv
Potential Firmware update without integrity check
Published Nov 12, 2024 · Updated Nov 21, 2024 · Assigned by AMI