InfoSecBulletin Cybersecurity for mankind
AMD has released security patches for two high-severity vulnerabilities in its System Management Mode (SMM). If exploited, these could let attackers execute arbitrary code and compromise system integrity.
CVE-2024-0179 and CVE-2024-21925 are high-severity vulnerabilities with a CVSS score of 8.2. AMD reported that these flaws, identified by Quarkslab, impact several generations of AMD EPYC and Ryzen processors.
About thousands of leaked AWS keys Held Full Admin Rights
US Bank investigates LockBit’s Data Breach Claims
Five new malware families actively targeting Asian Gov.t infra
T-Mobile Cuts Cables to Remove Chiness Salt Typhoon Hackers from Network
Splunk, Zyxel Patch Multiple Flaws Enabling RCE and Root Command Execution
“Zombie Card” attack revels expired Visa card may be used for contactless payments
Critical Zimbra RCE Flaw Actively Exploited in the Wild
Operation CameraSwarm
A single hacker compromise 1400+ Dahua camera worldwide
Cl0p Ransomware Listed 40+ Victims of PTC Windchill Campaign
Oracle Issues 943 Security Patches, Including Critical WebLogic Flaw
CVE-2024-0179 is a vulnerability in the AmdCpmDisplayFeatureSMM UEFI module that allows locally authenticated attackers to overwrite SMRAM, which may lead to arbitrary code execution, according to AMD.
CVE-2024-21925 arises from inadequate input validation in the AmdPspP2CmboxV2 UEFI module, potentially allowing an attacker to overwrite SMRAM and execute arbitrary code.
The vulnerabilities target System Management RAM (SMRAM), a secure memory area for SMM handlers, aimed at preventing unauthorized access. Attackers with certain privileges could gain higher access to run malicious code at the highest system privilege level (ring-0).
The vulnerabilities affect multiple processor families, including:
1st to 4th Gen AMD EPYC processors (Naples, Rome, Milan, Genoa)
AMD Ryzen 5000/7000 series desktop and mobile processors
AMD Ryzen Threadripper PRO and High-End Desktop (HEDT) processors
AMD Instinct MI300A Data Center GPUs
AMD requires firmware updates to the Platform Initialization (PI) firmware to address the issue. The specific firmware versions for affected processors are Naples PI 1.0.0.N (2024-09-17), Rome PI 1.0.0.K (2024-09-05), and Milan PI 1.0.0.E (2024-09-05).
AMD advises users to update their firmware through their OEM vendors to address security risks. Patches to mitigate vulnerabilities are included in BIOS updates.
Lazarus Group Unleashes New Malware Against Developers Worldwide
