CVE-2023-31359CWE-276

Incorrect default permissions in the AMD Manageability API could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code…

High · published May 13, 2025

CVSS v3.1
7.3
EPSS
0%
Percentile
5.2
In the wild
Unconfirmed
What it is

Incorrect default permissions in the AMD Manageability API could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution.

The record
Technical detail
CVSS v3.1
7.3 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00163 · 5.2th percentile
Weakness
CWE-276 · Incorrect Default Permissions
Published
2025-05-13T17:15Z
EPSS history
Timeline
  • 13 MAY 17:15Z
    Incorrect default permissions in the AMD Manageability API could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code…
    cvelistv5