CVE-2024-21962

Estado: Pendiente de análisisAlta (8.6)—

Improper Input Validation in the AMD RAID driver could allow an attacker to point to an arbitrary memory location potentially resulting in privilege escalation and arbitrary code execution.

CVSS

Versión: 4.0
Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Puntuación base: 8.6

Probabilidad de explotación (EPSS)

Probabilidad de explotación en los próximos 30 días: 0.11%
Percentil entre todas las CVEs puntuadas: 1
Fecha de la puntuación: 6/10/2026

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

🎯 Técnicas ATT&CK

Cómo se explota esta vulnerabilidad y qué consigue el atacante, en el lenguaje de MITRE ATT&CK.

ExplotaciónT1203 Exploitation for Client Executionexecution75 %
Impacto principalT1068 Exploitation for Privilege Escalationprivilege escalation80 %
Impacto secundarioT1059 Command and Scripting Interpreterexecution75 %

AV:L + UI:A indica ejecución en cliente (abrir fichero preparado del driver). CWE-1220 (validación impropia) en driver permite escalada de privilegios y ejecución de código arbitrario como impactos.

Inferido por nuestro agente de análisis a partir de la descripción oficial, el vector CVSS y la CWE, y comprobado por un supervisor. Puede contener errores.

🛡️ Mitigaciones ATT&CK que cubren estas técnicas

Execution Prevention Application Isolation and Sandboxing Exploit Protection Update Software Threat Intelligence Program Restrict Web-Based Content

Tecnologías afectadas (1)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

AMD — Raid Driver^AI

CWE

CWE-1220

Referencias

https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-4016.html

JSON original (NVD)

Mostrar

{
  "id": "CVE-2024-21962",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2024-21962",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2026-05-15T00:00:00+00:00"
        }
      }
    ],
    "cvssMetricV40": [
      {
        "type": "Secondary",
        "source": "psirt@amd.com",
        "cvssData": {
          "Safety": "NOT_DEFINED",
          "version": "4.0",
          "Recovery": "NOT_DEFINED",
          "baseScore": 8.6,
          "Automatable": "NOT_DEFINED",
          "attackVector": "LOCAL",
          "baseSeverity": "HIGH",
          "valueDensity": "NOT_DEFINED",
          "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
          "exploitMaturity": "NOT_DEFINED",
          "providerUrgency": "NOT_DEFINED",
          "userInteraction": "ACTIVE",
          "attackComplexity": "LOW",
          "attackRequirements": "NONE",
          "privilegesRequired": "LOW",
          "subIntegrityImpact": "HIGH",
          "vulnIntegrityImpact": "HIGH",
          "integrityRequirement": "NOT_DEFINED",
          "modifiedAttackVector": "NOT_DEFINED",
          "subAvailabilityImpact": "HIGH",
          "vulnAvailabilityImpact": "HIGH",
          "availabilityRequirement": "NOT_DEFINED",
          "modifiedUserInteraction": "NOT_DEFINED",
          "modifiedAttackComplexity": "NOT_DEFINED",
          "subConfidentialityImpact": "HIGH",
          "vulnConfidentialityImpact": "HIGH",
          "confidentialityRequirement": "NOT_DEFINED",
          "modifiedAttackRequirements": "NOT_DEFINED",
          "modifiedPrivilegesRequired": "NOT_DEFINED",
          "modifiedSubIntegrityImpact": "NOT_DEFINED",
          "modifiedVulnIntegrityImpact": "NOT_DEFINED",
          "vulnerabilityResponseEffort": "NOT_DEFINED",
          "modifiedSubAvailabilityImpact": "NOT_DEFINED",
          "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
          "modifiedSubConfidentialityImpact": "NOT_DEFINED",
          "modifiedVulnConfidentialityImpact": "NOT_DEFINED"
        }
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@amd.com",
      "affectedData": [
        {
          "vendor": "AMD",
          "product": "AMD EPYC™ 4005 Series Processors",
          "versions": [
            {
              "status": "unaffected",
              "version": "AMD RAID Software: 9.3.3.245"
            }
          ],
          "defaultStatus": "affected"
        },
        {
          "vendor": "AMD",
          "product": "AMD EPYC™ 4004 Series Processors",
          "versions": [
            {
              "status": "unaffected",
              "version": "AMD RAID Software: 9.3.3.245"
            }
          ],
          "defaultStatus": "affected"
        },
        {
          "vendor": "AMD",
          "product": "AMD Ryzen™ Threadripper™ PRO 3000 WX-Series Processors",
          "versions": [
            {
              "status": "unaffected",
              "version": "AMD RAID Software: 9.3.3.245"
            }
          ],
          "defaultStatus": "affected"
        },
        {
          "vendor": "AMD",
          "product": "AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics",
          "versions": [
            {
              "status": "unaffected",
              "version": "No fix planned"
            }
          ],
          "defaultStatus": "affected"
        },
        {
          "vendor": "AMD",
          "product": "AMD Ryzen™ Threadripper™ 7000 WX-Series Processors",
          "versions": [
            {
              "status": "unaffected",
              "version": "AMD RAID Software: 9.3.3.245"
            }
          ],
          "defaultStatus": "affected"
        },
        {
          "vendor": "AMD",
          "product": "AMD Ryzen™ 9000HX Series Processors",
          "versions": [
            {
              "status": "unaffected",
              "version": "AMD RAID Software: 9.3.3.245"
            }
          ],
          "defaultStatus": "affected"
        },
        {
          "vendor": "AMD",
          "product": "AMD Ryzen™ Threadripper™ PRO 5000 WX-Series Processors",
          "versions": [
            {
              "status": "unaffected",
              "version": "AMD RAID Software: 9.3.3.245"
            }
          ],
          "defaultStatus": "affected"
        },
        {
          "vendor": "AMD",
          "product": "AMD Ryzen™ 3000 Series Desktop Processors",
          "versions": [
            {
              "status": "unaffected",
              "version": "No fix planned"
            }
          ],
          "defaultStatus": "affected"
        },
        {
          "vendor": "AMD",
          "product": "AMD Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics",
          "versions": [
            {
              "status": "unaffected",
              "version": "No fix planned"
            }
          ],
          "defaultStatus": "affected"
        },
        {
          "vendor": "AMD",
          "product": "AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics",
          "versions": [
            {
              "status": "unaffected",
              "version": "No fix planned"
            }
          ],
          "defaultStatus": "affected"
        },
        {
          "vendor": "AMD",
          "product": "AMD Ryzen™ 5000 Series Desktop Processors",
          "versions": [
            {
              "status": "unaffected",
              "version": "No fix planned"
            }
          ],
          "defaultStatus": "affected"
        },
        {
          "vendor": "AMD",
          "product": "AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics",
          "versions": [
            {
              "status": "unaffected",
              "version": "AMD RAID Software: 9.3.3.245"
            }
          ],
          "defaultStatus": "affected"
        },
        {
          "vendor": "AMD",
          "product": "AMD Ryzen™ 8040 Series Mobile Processors with Radeon™ Graphics",
          "versions": [
            {
              "status": "unaffected",
              "version": "AMD RAID Software: 9.3.3.245"
            }
          ],
          "defaultStatus": "affected"
        },
        {
          "vendor": "AMD",
          "product": "AMD Ryzen™ Z2 Series Processors",
          "versions": [
            {
              "status": "unaffected",
              "version": "AMD RAID Software: 9.3.3.245"
            }
          ],
          "defaultStatus": "affected"
        },
        {
          "vendor": "AMD",
          "product": "AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics",
          "versions": [
            {
              "status": "unaffected",
              "version": "No fix planned"
            }
          ],
          "defaultStatus": "affected"
        },
        {
          "vendor": "AMD",
          "product": "AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics",
          "versions": [
            {
              "status": "unaffected",
              "version": "No fix planned"
            }
          ],
          "defaultStatus": "affected"
        },
        {
          "vendor": "AMD",
          "product": "AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics",
          "versions": [
            {
              "status": "unaffected",
              "version": "No fix planned"
            }
          ],
          "defaultStatus": "affected"
        },
        {
          "vendor": "AMD",
          "product": "AMD Ryzen™ AI 300 Series Processors",
          "versions": [
            {
              "status": "unaffected",
              "version": "AMD RAID Software: 9.3.3.245"
            }
          ],
          "defaultStatus": "affected"
        },
        {
          "vendor": "AMD",
          "product": "AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics",
          "versions": [
            {
              "status": "unaffected",
              "version": "No fix planned"
            }
          ],
          "defaultStatus": "affected"
        },
        {
          "vendor": "AMD",
          "product": "AMD Ryzen™ 7045 Series Mobile Processors with Radeon™ Graphics",
          "versions": [
            {
              "status": "unaffected",
              "version": "AMD RAID Software: 9.3.3.245"
            }
          ],
          "defaultStatus": "affected"
        },
        {
          "vendor": "AMD",
          "product": "AMD Ryzen™ AI Max 300 Series Processors",
          "versions": [
            {
              "status": "unaffected",
              "version": "AMD RAID Software: 9.3.3.245"
            }
          ],
          "defaultStatus": "affected"
        },
        {
          "vendor": "AMD",
          "product": "AMD Ryzen™ Threadripper™ 9000 Series",
          "versions": [
            {
              "status": "unaffected",
              "version": "AMD RAID Software: 9.3.3.245"
            }
          ],
          "defaultStatus": "affected"
        },
        {
          "vendor": "AMD",
          "product": "AMD Ryzen™ 2000 Mobile Processors",
          "versions": [
            {
              "status": "unaffected",
              "version": "No fix planned"
            }
          ],
          "defaultStatus": "affected"
        },
        {
          "vendor": "AMD",
          "product": "AMD Ryzen™ 4000 Series Desktop Processors",
          "versions": [
            {
              "status": "unaffected",
              "version": "No fix planned"
            }
          ],
          "defaultStatus": "affected"
        },
        {
          "vendor": "AMD",
          "product": "AMD Ryzen™ 7000 Series Desktop Processors",
          "versions": [
            {
              "status": "unaffected",
              "version": "AMD RAID Software: 9.3.3.245"
            }
          ],
          "defaultStatus": "affected"
        },
        {
          "vendor": "AMD",
          "product": "AMD Ryzen™ 8000 Series Desktop Processors",
          "versions": [
            {
              "status": "unaffected",
              "version": "AMD RAID Software: 9.3.3.245"
            }
          ],
          "defaultStatus": "affected"
        },
        {
          "vendor": "AMD",
          "product": "AMD Ryzen™ 9000 Series Desktop Processors",
          "versions": [
            {
              "status": "unaffected",
              "version": "AMD RAID Software: 9.3.3.245"
            }
          ],
          "defaultStatus": "affected"
        },
        {
          "vendor": "AMD",
          "product": "AMD EPYC™ Embedded 4005 Series Processors",
          "versions": [
            {
              "status": "unaffected",
              "version": "Embedded EPYC_4005 Windows RAID Driver - 9.3.3.00245 - (71794)"
            }
          ],
          "defaultStatus": "affected"
        }
      ]
    }
  ],
  "published": "2026-05-15T03:16:20.803",
  "references": [
    {
      "url": "https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-4016.html",
      "source": "psirt@amd.com"
    }
  ],
  "vulnStatus": "Awaiting Analysis",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "psirt@amd.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-1220"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Improper Input Validation in the AMD RAID driver could allow an attacker to point to an arbitrary memory location potentially resulting in privilege escalation and arbitrary code execution."
    }
  ],
  "lastModified": "2026-06-17T07:10:27.613",
  "sourceIdentifier": "psirt@amd.com"
}