Privilege Escalation in AMD Integrated Management Technology
CVE-2023-31360

7.3HIGH

Key Information:

Vendor
Amd
Status
Aim-t(amd Integrated Management Technology) Software
Vendor
CVE Published:
11 February 2025

Summary

An issue has been identified in the installation directory of the AMD Integrated Management Technology (AIM-T) Manageability Service due to incorrect default permissions. This vulnerability could allow an attacker to escalate privileges, which may lead to arbitrary code execution on affected systems. Proper configuration and timely updates are essential to mitigate the risks associated with this vulnerability.

Affected Version(s)

AIM-T(AMD Integrated Management Technology) software 4.0.0.722

References

https://www.amd.com/en/resources/product-security/bulleti...

CVSS V3.1

Score:
7.3
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.