Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-21939 State: PUBLISHED Published: 2024-11-12T17:15:02.369Z Last Updated: 2024-11-13T20:37:39.656Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: AMD Products: AMD Cloud Manageability Service Software Problem Types: CWE-276 Description: Incorrect default permissions in the AMD Cloud Manageability Service (ACMS) Software installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/resources/product-security/bulletin/amd-sb-9006.html
CVE ID: CVE-2024-21945 State: PUBLISHED Published: 2024-11-12T17:15:15.364Z Last Updated: 2024-11-13T20:18:46.240Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: AMD Products: AMD Ryzen™ Master Monitoring SDK Problem Types: CWE-276 Description: Incorrect default permissions in the AMD RyzenTM Master monitoring SDK installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/resources/product-security/bulletin/amd-sb-9004.html
CVE ID: CVE-2024-21946 State: PUBLISHED Published: 2024-11-12T17:15:37.010Z Last Updated: 2024-11-13T20:15:22.603Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: AMD Products: AMD Ryzen Master Utility for Overclocking Control Problem Types: CWE-276 Description: Incorrect default permissions in the AMD RyzenTM Master Utility installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/resources/product-security/bulletin/amd-sb-9004.html
CVE ID: CVE-2024-21947 State: PUBLISHED Published: 2025-09-06T17:10:47.951Z Last Updated: 2025-09-23T21:24:22.687Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: AMD Products: AMD Ryzen™ Threadripper™ 3000 Processors, AMD Ryzen™ Threadripper™ PRO 5000 WX-Series Processors, AMD Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ Threadripper™ PRO 3000 WX-Series Processors, AMD Ryzen™ 3000 Series Desktop Processors, AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 5000 Series Desktop Processors, AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Gr
Radeon™ Graphics, AMD Ryzen™ 5000 Series Desktop Processors, AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics, AMD Ryzen™ 8000 Series Desktop Processors, AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics, AMD Ryzen™ 7000 Series Desktop Processors, AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics, AMD Ryzen™ 7045 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics, AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Grap
Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics, AMD Ryzen™ 4000 Series Desktop Processors, AMD Ryzen™ Embedded R1000 Series Processors, AMD Ryzen™ Embedded R2000 Series Processors, AMD Ryzen™ Embedded 5000 Series Processors, AMD Ryzen™ Embedded V1000 Series Processors, AMD Ryzen™ Embedded V2000 Series Processors, AMD Ryzen™ Embedded V3000 Series Processors Problem Types: CWE-1220 Description: Improper input validation in the system management mode (SMM) could allow a privileged attacker to overwrite arbitrary memory potentially resulting in arbitrary code execution at the SMM level. Additional Analyst Notes: - CISA
te arbitrary memory potentially resulting in arbitrary code execution at the SMM level. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-4012.html - https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-5007.html
CVE ID: CVE-2024-21949 State: PUBLISHED Published: 2024-11-12T17:15:54.230Z Last Updated: 2024-11-14T18:32:15.710Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: AMD Products: AMD Ryzen™ AI Software Problem Types: CWE-20 Description: Improper validation of user input in the NPU driver could allow an attacker to provide a buffer with unexpected size, potentially leading to system crash. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7017.html
CVE ID: CVE-2024-21957 State: PUBLISHED Published: 2024-11-12T17:16:13.632Z Last Updated: 2024-11-14T16:19:51.948Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: AMD Products: AMD Management Console Problem Types: CWE-276 Description: Incorrect default permissions in the AMD Management Console installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/resources/product-security/bulletin/amd-sb-9003.html
CVE ID: CVE-2024-21958 State: PUBLISHED Published: 2024-11-12T17:16:23.733Z Last Updated: 2024-11-14T16:18:09.623Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: AMD Products: AMD Provisioning Console (APC) Software Problem Types: CWE-276 Description: Incorrect default permissions in the AMD Provisioning Console installation directory could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/resources/product-security/bulletin/amd-sb-9007.html
CVE ID: CVE-2024-21960 State: PUBLISHED Published: 2025-05-13T16:54:53.805Z Last Updated: 2025-05-16T03:55:38.884Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: AMD Products: AMD Optimizing CPU Libraries (AOCL) Problem Types: CWE-276 Description: Incorrect default permissions in the AMD Optimizing CPU Libraries (AOCL) installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/resources/product-security/bulletin/amd-sb-9014.html
CVE ID: CVE-2024-21966 State: PUBLISHED Published: 2025-02-11T19:56:25.414Z Last Updated: 2025-02-11T20:56:30.357Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: AMD Products: AMD Ryzen™ Master Utility Problem Types: CWE-269 Description: A DLL hijacking vulnerability in the AMD Ryzen™ Master Utility could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/resources/product-security/bulletin/amd-sb-9010.html
CVE ID: CVE-2024-21970 State: PUBLISHED Published: 2025-09-06T17:20:19.749Z Last Updated: 2025-09-08T14:51:10.909Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N) Vendors: AMD Products: AMD Ryzen™ Threadripper™ 3000 Processors, AMD Ryzen™ Threadripper™ PRO 5000 WX-Series Processors, AMD Ryzen™ Threadripper™ PRO 3000 WX-Series Processors, AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics, Renoir Cezanne Raven Ridge Raven Ridge 2 Picasso Summit Pinnacle Ridge Matisse Vermeer, AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics, AMD Ryzen™ 8000 Series Desktop Processors, AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen
cs, AMD Ryzen™ 8000 Series Desktop Processors, AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics, AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics, AMD Ryzen™ 7045 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics, AMD Ryzen™ 7000 Series Desktop Processors, AMD Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 3000 Series Desktop Processors, AMD Ryzen™ 5000 Series Desktop Processors, AMD Ryzen™ Embedded R1000 Series
AMD Ryzen™ 3000 Series Desktop Processors, AMD Ryzen™ 5000 Series Desktop Processors, AMD Ryzen™ Embedded R1000 Series Processors, AMD Ryzen™ Embedded R2000 Series Processors, AMD Ryzen™ Embedded 7000 Series Processors, AMD Ryzen™ Embedded 5000 Series Processors, AMD Ryzen™ Embedded V1000 Series Processors, AMD Ryzen™ Embedded V2000 Series Processors, AMD Ryzen™ Embedded V3000 Series Processors Problem Types: CWE-129 Description: Improper validation of an array index in the AND power Management Firmware could allow a privileged attacker to corrupt AGESA memory potentially leading to a loss of integrity. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/
leading to a loss of integrity. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-4012.html - https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-5007.html
CVE ID: CVE-2024-21971 State: PUBLISHED Published: 2025-02-12T00:01:00.419Z Last Updated: 2025-09-23T21:26:06.031Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: AMD Products: AMD Ryzen™ 5000 Series Desktop Processors, AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics, AMD Ryzen™ 7000 Series Desktop Processors, AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics, AMD Ryzen™ 4000 Series Desktop Processor with Radeon™ Graphics, AMD Ryzen™ 8000 Series Processor with Radeon™ Graphics, AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 3000 Series Mobile Processor with Radeon™ Graphics, AMD Ryzen™ 4000 Series Mo
ocessors with Radeon™ Graphics, AMD Ryzen™ 3000 Series Mobile Processor with Radeon™ Graphics, AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics, AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics, AMD Ryzen™ 6000 Series Processor with Radeon™ Graphics, AMD Ryzen™ 7035 Series Processor with Radeon™ Graphics, AMD Ryzen™ 7030 Series Processors with Radeon™ Graphics, AMD Ryzen™ 7040 Series Processors with Radeon™ Graphics, AMD Ryzen™ 7045 Series Mobile Processors, AMD Radeon™ RX 5000 Series Graphics Products, AMD Radeon™ PRO W5000 Series Graphics Products, AMD Radeon™ RX 7000 Series Graphics Products, AMD Radeon™ PRO W70
ducts, AMD Radeon™ PRO W5000 Series Graphics Products, AMD Radeon™ RX 7000 Series Graphics Products, AMD Radeon™ PRO W7000 Series Graphics Products, AMD Radeon™ VII, AMD Radeon™ PRO VII, AMD Radeon™ Instinct™ MI25, AMD Radeon™ PRO V520, AMD Radeon™ PRO V620, AMD Radeon™ PRO V710, AMD Ryzen™ Embedded R1000, AMD Ryzen™ Embedded R2000, AMD Ryzen™ Embedded 7000, AMD Ryzen™ Embedded V1000, AMD Ryzen™ Embedded V2000, AMD Ryzen™ Embedded V3000 Problem Types: CWE-1220 Description: Improper input validation in AMD Crash Defender could allow an attacker to provide the Windows® system process ID to a kernel-mode driver, resulting in an operating system crash, potentially leading to denial of service. A
process ID to a kernel-mode driver, resulting in an operating system crash, potentially leading to denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/resources/product-security/bulletin/amd-sb-6008.html
CVE ID: CVE-2024-21972 State: PUBLISHED Published: 2024-04-23T16:36:03.933Z Last Updated: 2025-11-04T18:23:17.557Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: AMD Products: AMD Software: Adrenalin Edition , AMD Software: PRO Edition Problem Types: CWE-787 Description: An out of bounds write vulnerability in the AMD Radeon™ user mode driver for DirectX® 11 could allow an attacker with access to a malformed shader to potentially achieve arbitrary code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.amd.com/en/resources/product-security/bulletin/amd-sb-6012.html
CVE ID: CVE-2024-21974 State: PUBLISHED Published: 2024-11-12T17:16:40.940Z Last Updated: 2024-11-14T14:00:15.788Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: AMD Products: AMD Ryzen™ AI Software Problem Types: CWE-20 Description: Improper input validation in the NPU driver could allow an attacker to supply a specially crafted pointer potentially leading to arbitrary code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7017.html
CVE ID: CVE-2024-21975 State: PUBLISHED Published: 2024-11-12T17:16:51.256Z Last Updated: 2024-11-13T19:34:21.331Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: AMD Products: AMD Ryzen™ AI Software Problem Types: CWE-20 Description: Improper input validation in the NPU driver could allow an attacker to supply a specially crafted pointer potentially leading to arbitrary code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7017.html
CVE ID: CVE-2024-21976 State: PUBLISHED Published: 2024-11-12T17:17:02.422Z Last Updated: 2025-08-26T20:18:11.781Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: AMD Products: AMD Ryzen™ AI Software Problem Types: CWE-20 Description: Improper input validation in the NPU driver could allow an attacker to supply a specially crafted pointer potentially leading to arbitrary code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7017.html
CVE ID: CVE-2024-21977 State: PUBLISHED Published: 2025-09-05T12:58:39.312Z Last Updated: 2025-09-05T13:35:08.152Z Severity: LOW (CVSS 3.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:N) Vendors: AMD Products: AMD EPYC™ 7003 Series Processors, AMD EPYC™ 9004 Series Processors, AMD EPYC™ 8004 Series Processors, AMD Ryzen™ Threadripper™ PRO 5000 WX-Series Processors, AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics, AMD Ryzen™ 5000 Series Desktop Processors, AMD Ryzen™ 7000 Series Desktop Processors, AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics, AMD Ry
en™ 7040 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics, AMD Ryzen™ 7045 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ Threadripper™ PRO 3000 WX-Series Processors, AMD Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 8000 Series Desktop Processors, AMD EPYC™ Embedded 7003 Series Processors, AMD EPYC™ Embedded 9004 Series Processors, AMD Ryzen™ Embedded 8000 Series Processors, AMD Ryzen™ Embedded 7000 Series Processors, AMD Ryzen™ Embedded 5000 Series Processors, AMD Ryzen™ Embedded V3000 Series Processors Problem Types: CWE-459 Description: Incomplete cleanup after loading a CPU microcode patch may al
3000 Series Processors Problem Types: CWE-459 Description: Incomplete cleanup after loading a CPU microcode patch may allow a privileged attacker to degrade the entropy of the RDRAND instruction, potentially resulting in loss of integrity for SEV-SNP guests. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-4012.html - https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-5007.html - https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-3014.html
CVE ID: CVE-2024-21978 State: PUBLISHED Published: 2024-08-05T16:05:34.019Z Last Updated: 2024-08-05T17:36:02.731Z Severity: MEDIUM (CVSS 6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N) Vendors: AMD Products: 3rd Gen AMD EPYC™ Processors, 4th Gen AMD EPYC™ Processors, AMD EPYC™ Embedded 7003, AMD EPYC™ Embedded 9003 Problem Types: CWE-20 Description: Improper input validation in SEV-SNP could allow a malicious hypervisor to read or overwrite guest memory potentially leading to data leakage or data corruption. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3011.html
CVE ID: CVE-2024-21979 State: PUBLISHED Published: 2024-04-23T16:36:38.556Z Last Updated: 2025-11-04T18:23:18.731Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: AMD Products: AMD Software: Adrenalin Edition , AMD Software: PRO Edition Problem Types: CWE-787 Description: An out of bounds write vulnerability in the AMD Radeon™ user mode driver for DirectX® 11 could allow an attacker with access to a malformed shader to potentially achieve arbitrary code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.amd.com/en/resources/product-security/bulletin/amd-sb-6012.html
CVE ID: CVE-2024-21980 State: PUBLISHED Published: 2024-08-05T16:06:36.216Z Last Updated: 2024-08-05T21:00:57.665Z Severity: HIGH (CVSS 7.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N) Vendors: AMD Products: 3rd Gen AMD EPYC™ Processors, 4th Gen AMD EPYC™ Processors, AMD EPYC™ Embedded 7003, AMD EPYC™ Embedded 9003 Problem Types: CWE-119 Description: Improper restriction of write operations in SNP firmware could allow a malicious hypervisor to potentially overwrite a guest's memory or UMC seed resulting in loss of confidentiality and integrity. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3011.html
CVE ID: CVE-2024-21981 State: PUBLISHED Published: 2024-08-13T16:54:58.122Z Last Updated: 2024-08-15T18:09:24.358Z Severity: MEDIUM (CVSS 5.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N) Vendors: AMD Products: AMD EPYC™ 7001 Series Processors, AMD EPYC™ 7002 Series Processors, AMD EPYC™ 7003 Series Processors, AMD Ryzen™ 3000 Series Desktop Processors, AMD Ryzen™ 5000 Series Desktop Processors, AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics, AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics, AMD Ryzen™ 4000 Series Desktop Processors with Radeon™ Graphics, AMD Ryzen™ Threadripper™ 3000 Series Processors, AMD Ryzen™ Threadripper™ PRO 3000WX Series Processors, AM
on™ Graphics, AMD Ryzen™ Threadripper™ 3000 Series Processors, AMD Ryzen™ Threadripper™ PRO 3000WX Series Processors, AMD Ryzen™ Threadripper™ PRO 5000WX Processors, AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 3000 Series Mobile Processor with Radeon™ Graphics, AMD EPYC™ Embedded 3000 Series Processors, AMD EPYC™ Embedded 7002 Series Processors, AMD EPYC™ Embedded 7003 Series Processors, AMD Ryzen™ Embedded R1000 Series Processors, AMD Ryzen™ Embedded R2000 Series Processors, AMD Ryzen™ Embedded 5000 Series Processors, AMD Ryzen™ Embedded V1000 Series Processors Description: Improper key usage control in AMD Secure Processor (ASP) may allow an attacker with lo
00 Series Processors Description: Improper key usage control in AMD Secure Processor (ASP) may allow an attacker with local access who has gained arbitrary code execution privilege in ASP to extract ASP cryptographic keys, potentially resulting in loss of confidentiality and integrity. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3003.html
CVE ID: CVE-2024-21982 State: PUBLISHED Published: 2024-01-11T23:32:14.386Z Last Updated: 2025-06-16T19:48:30.010Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N) Vendors: NetApp Products: ONTAP 9 Problem Types: 201 Description: ONTAP versions 9.4 and higher are susceptible to a vulnerability which when successfully exploited could lead to disclosure of sensitive information to unprivileged attackers when the object-store profiler command is being run by an administrative user. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.netapp.com/advisory/ntap-20240111-0001/
CVE ID: CVE-2024-21983 State: PUBLISHED Published: 2024-02-16T22:35:02.365Z Last Updated: 2024-08-01T22:35:34.510Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: NetApp Products: StorageGRID Problem Types: CWE-248 Description: StorageGRID (formerly StorageGRID Webscale) versions prior to 11.8 are susceptible to a Denial of Service (DoS) vulnerability. Successful exploit by an authenticated attacker could lead to an out of memory condition or node reboot. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.netapp.com/advisory/ntap-20240216-0012/
CVE ID: CVE-2024-21984 State: PUBLISHED Published: 2024-02-16T22:37:47.580Z Last Updated: 2025-04-24T15:11:36.844Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:N) Vendors: NetApp Products: StorageGRID Problem Types: CWE-79 Description: StorageGRID (formerly StorageGRID Webscale) versions prior to 11.8 are susceptible to a difficult to exploit Reflected Cross-Site Scripting (XSS) vulnerability. Successful exploit requires the attacker to know specific information about the target instance and trick a privileged user into clicking a specially crafted link. This could allow the attacker to view or modify configuration settings or add or modify user accounts. Additional
link. This could allow the attacker to view or modify configuration settings or add or modify user accounts. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://security.netapp.com/advisory/ntap-20240216-0013/
CVE ID: CVE-2024-21985 State: PUBLISHED Published: 2024-01-26T16:01:48.168Z Last Updated: 2025-05-29T15:12:35.934Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H) Vendors: NetApp Products: ONTAP 9 Problem Types: CWE-269 Description: ONTAP 9 versions prior to 9.9.1P18, 9.10.1P16, 9.11.1P13, 9.12.1P10 and 9.13.1P4 are susceptible to a vulnerability which could allow an authenticated user with multiple remote accounts with differing roles to perform actions via REST API beyond their intended privilege. Possible actions include viewing limited configuration details and metrics or modifying limited settings, some of which could result in a Denial of Service (DoS). Additiona
on details and metrics or modifying limited settings, some of which could result in a Denial of Service (DoS). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.netapp.com/advisory/ntap-20240126-0001/
CVE ID: CVE-2024-21987 State: PUBLISHED Published: 2024-02-16T20:27:34.000Z Last Updated: 2024-08-13T20:53:25.600Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: NetApp Products: SnapCenter Problem Types: CWE-285 Description: SnapCenter versions 4.8 prior to 5.0 are susceptible to a vulnerability which could allow an authenticated SnapCenter Server user to modify system logging configuration settings Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.netapp.com/advisory/ntap-20240216-0001/