Potential DLL Hijacking Vulnerability in AMD μProf Could Lead to Privilege Escalation and Arbitrary Code Execution
CVE-2023-31348

7.8HIGH

Key Information:

Vendor

Amd
Status
Μprof Tool
Vendor
CVE Published:
13 August 2024

What is CVE-2023-31348?

A vulnerability exists within AMD µProf that exploits DLL hijacking techniques, enabling an attacker to escalate privileges. This flaw poses a significant risk as it may lead to arbitrary code execution, thereby compromising the integrity and security of affected systems. Vigilance and immediate action are advised to mitigate the potential implications of this vulnerability.

Affected Version(s)

μProf Tool μProf Tool < 3.4.494

References

https://www.amd.com/en/corporate/product-security/bulleti...
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.