AMI Aptio V BIOS Improper Input Validation Vulnerability Allowing Arbitrary Code Execution at SMM Level

A vulnerability has been identified in AMI Aptio V BIOS, where improper input validation by a local attacker can lead to overwriting arbitrary memory and executing arbitrary code at the System Management Mode (SMM) level. This vulnerability, associated with the BiosGuard module, impacts confidentiality, integrity, and availability.

Impact

Exploitation of this vulnerability could allow a local attacker to overwrite arbitrary memory and execute arbitrary code at the SMM level, potentially leading to unauthorized access or modification of system resources.

Remediation

Users are advised to update to version BKC_5.38.