Medium severity5.0NVD Advisory· Published Sep 23, 2025· Updated Apr 15, 2026

CVE-2024-21927

Description

Improper input validation in Satellite Management Controller (SMC) may allow an attacker with privileges to use certain special characters in manipulated Redfish® API commands, causing service processes like OpenBMC to crash and reset, potentially resulting in denial of service.

Affected products

AMD/Satellite Management Controllerllm-fuzzy

Patches

Vulnerability mechanics

References

www.amd.com/en/resources/product-security/bulletin/AMD-SB-6016.htmlnvd

News mentions

No linked articles in our index yet.

cvss	0.325
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000