1. Home
  2. Security Center
  3. AMD SMM Vulnerabilities, Feb. 11 2025

Security Center

The latest security information on MiTAC server products

Security Center

Security Advisory

 

AMD SMM Vulnerabilities, Feb. 11 2025 (2025-03-11)
(AMD-SB-7027)

Summary:

Quarkslab reported vulnerabilities that could allow attackers to execute code within SMM (System Management Mode).

CVE-2024-21925 is the result of a lack of sufficient input buffer(s) validation within the AmdPspP2CmboxV2 UEFI module. CVE-2024-0179 is an SMM (System Management Mode) Callout vulnerability within the AmdCpmDisplayFeatureSMM UEFI module. Both can allow ring-0 attackers to escalate their privileges, potentially resulting in arbitrary code execution. AMD has begun releasing firmware mitigations to fix these vulnerabilities.

Affected Platforms and BIOS version numbers that contain the fix:

Product Name (Model Name)BIOS Version with Fix
S8050GM2NE(S8050)V3.02
S8050GM4NE-2T(S8050)V3.04
B8050F65TV8E2H-G (FT65TB8050)V3.02
B8050F65TV8E2H-N (FT65TB8050)V3.02
B8050F65TV8E2H-2T-N (FT65TB8050)V3.05
S8016AGM2NR(S8016)V3.08
B8016H68D5(HG68B8016)V2.08
B8016G40V4(GX40B8016)V2.06


 

SUBSCRIBE NOW to get the latest news.

Clicking "OK" confirms your acceptance of our Terms of Use, Privacy Policy, and Cookie Policy.