AMD Satellite Management Controller Redfish API Improper Input Validation Vulnerability Allowing File Removal

A vulnerability exists in the Satellite Management Controller (SMC) of AMD Instinct MI300X accelerators, specifically within the Redfish API. This vulnerability arises from improper input validation, which may enable an attacker with privileges to manipulate Redfish API commands. Exploitation of this vulnerability could lead to the removal of files from the local root directory, potentially causing data corruption.

Impact

Exploitation of this vulnerability could result in unauthorized file removal from the root directory, leading to data corruption.

Remediation

Users are advised to update AMD Instinct MI300X accelerators to version BKC 24.10 or later.