CVE-2024-2315
High
Description
APTIOV contains a vulnerability in BIOS where may cause Improper Access Control by a local attacker. Successful exploitation of this vulnerability may lead to unexpected SPI flash modifications and BIOS boot kit launches, also impacting the availability.
SeverityHigh
CVSS7.1
Exploit probability—
ProductAmi Aptio V
PublishedNov 12, 2024
First seenNov 12, 2024
Weakness typeCWE-284Improper access control
How to fix
Update
- ami aptio_v5.037 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ami aptio_v | 5.0 ≤ v < 5.037 | 5.037 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.