CVE-2024-2315: SMM arbitrary code execution in Overclock
APTIOV contains a vulnerability in BIOS where may cause Improper Access Control by a local attacker. Successful exploitation of this vulnerability may lead to unexpected SPI flash modifications and BIOS boot kit launches, also impacting the availability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-2315?
CVE-2024-2315 has been classified as a critical vulnerability due to improper access control that can lead to significant security breaches.
How do I fix CVE-2024-2315?
To fix CVE-2024-2315, it is recommended to update the BIOS firmware of affected AMI Aptio V systems to the latest version provided by the vendor.
Who is affected by CVE-2024-2315?
CVE-2024-2315 affects systems running AMI Aptio V BIOS versions between 5.0 and 5.037.
What are the potential impacts of CVE-2024-2315?
Successful exploitation of CVE-2024-2315 may lead to unauthorized modifications of SPI flash and the potential launch of BIOS boot kits.
Can CVE-2024-2315 be exploited remotely?
CVE-2024-2315 requires local access for exploitation, making it less likely to be exploited remotely.