7.3
High
CVE-2024-21939 Incorrect default permissions in the AMD Cloud Manageability Service (ACMS) Software installation directory could…
Description
Incorrect default permissions in the AMD Cloud Manageability Service (ACMS) Software installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| AMD Cloud Manageability Service Software 2.0 | earliest → < 2.0.0.232 | 2.0.0.232 |
| cloud_manageability_service_acms_software 2.0 | earliest → < 2.0.0.232 | 2.0.0.232 |