7.3
High
CVE-2023-31349 Incorrect default permissions in the AMD μProf installation directory could allow an attacker to achieve privilege…
Description
Incorrect default permissions in the AMD μProf installation directory could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| μProf Tool 3.4 | earliest → < 3.4.494 | 3.4.494 |
| amd_uprof 3.4 | earliest → < 3.4.494 | 3.4.494 |
Other CVEs of μProf Tool
The 5 CVEs of μProf Tool →
CVE-2023-31366
Improper input validation in AMD μProf could allow an attacker to perform a write to an invalid address, potentially…
3.3
Low
CVE-2023-31348
A DLL hijacking vulnerability in AMD μProf could allow an attacker to achieve privilege escalation, potentially…
7.3
High
CVE-2023-31341
Insufficient validation of the Input Output Control (IOCTL) input buffer in AMD μProf may allow an authenticated…
7.3
High
CVE-2021-26334
The AMDPowerProfiler.sys driver of AMD μProf tool may allow lower privileged users to access MSRs in kernel which may…
Not rated