CVE-2024-33659
High
Description
AMI APTIOV contains a vulnerability in BIOS where an attacker may cause an Improper Input Validation by a local attacker. Successful exploitation of these vulnerabilities may lead to overwriting arbitrary memory and execute arbitrary code at SMM level, also impacting Confidentiality, Integrity, and Availability.
SeverityHigh
CVSS8.8
Exploit probability—
ProductAmi Aptio V
PublishedFeb 11, 2025
First seenFeb 11, 2025
Weakness typeCWE-20Improper input validation
How to fix
Update
- ami aptio_v5.038 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ami aptio_v | 5.0 ≤ v < 5.038 | 5.038 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.