Improper Input Validation in Satellite Management Controller by AMD

CVE-2024-21927

What is CVE-2024-21927?

An improper input validation issue in the Satellite Management Controller (SMC) allows privileged attackers to inject certain special characters into manipulated Redfish® API commands. This exploitation can lead to the crashing and resetting of service processes such as OpenBMC, potentially resulting in a denial of service. Users are advised to review their configurations and apply the necessary updates to mitigate risks.

References