CVE-2024-21939

7.3 highEPSS 0.2%

High (7.3) in amd cloud manageability service. EPSS 0.2% chance of exploitation in the next 30 days.

Incorrect default permissions in the AMD Cloud Manageability Service (ACMS) Software installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution.

Severity

CVSS 3.1

7.3 high

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 13% of CVEs (scores of 2026-10-31)
CWE: CWE-276
Published: 2024-11-12
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

amd:cloud_manageability_service

References

https://www.amd.com/en/resources/product-security/bulletin/amd-sb-9006.html

Check your stack JSON