Patchwire CVEs, their patch status, and feeds to follow them

CVE-2024-21927

No fix known EPSS <1%CVSS 5.0

Improper input validation in Satellite Management Controller (SMC) may allow an attacker with privileges to use certain special characters in manipulated Redfish® API commands, causing service processes like OpenBMC to crash and reset, potentially resulting in denial of service.

Published 2025-09-23 · CVE record · OSV

Products: AMD Instinct™ MI300X