CVE-2024-56161CWE-347

Improper signature verification in AMD CPU ROM microcode patch loader may allow an attacker with local administrator privilege to load malicious CPU microcode…

High · published February 3, 2025

CVSS v3.1
7.2
EPSS
1%
Percentile
44.2
In the wild
Unconfirmed
What it is

Improper signature verification in AMD CPU ROM microcode patch loader may allow an attacker with local administrator privilege to load malicious CPU microcode resulting in loss of confidentiality and integrity of a confidential guest running under AMD SEV-SNP.

The record
Technical detail
CVSS v3.1
7.2 · HIGH
Vector
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00533 · 44.2th percentile
Weakness
CWE-347 · Improper Verification of Cryptographic Signature
Published
2025-02-03T17:24Z
EPSS history
Timeline
  • 03 FEB 17:24Z
    Improper signature verification in AMD CPU ROM microcode patch loader may allow an attacker with local administrator privilege to load malicious CPU microcode…
    cvelistv5