What is the CVSS score of CVE-2024-56161?

CVE-2024-56161 has a CVSS 3.1 base score of 7.2 (High). CVSS vector: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N. EPSS exploitation probability: 0.1%.

Which versions of Jwt Attack are affected by CVE-2024-56161?

CVE-2024-56161 presents moderate security risk, a signature bypass vulnerability rated CVSS 7.2. Exploitation could compromise the security of affected deployments.

How to fix or mitigate CVE-2024-56161?

Within 30 days: Identify all affected systems and apply vendor patches as part of regular patch cycle. Monitor vendor channels for patch availability.

Jwt Attack CVE-2024-56161

HIGH

Improper Verification of Cryptographic Signature (CWE-347)

2025-02-03 psirt@amd.com

Amd Information Disclosure Jwt Attack Red Hat Suse

7.2

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.2 HIGH

AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N

SUSE

HIGH

qualitative

Red Hat

7.2 HIGH

qualitative

Primary rating from NVD.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N

Attack Vector

Local

Attack Complexity

High

Privileges Required

High

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

High

Availability

None

Lifecycle Timeline

Analysis Generated

Mar 28, 2026 - 18:07 vuln.today

CVE Published

Feb 03, 2025 - 18:15 nvd

HIGH 7.2

DescriptionCVE.org

Improper signature verification in AMD CPU ROM microcode patch loader may allow an attacker with local administrator privilege to load malicious CPU microcode resulting in loss of confidentiality and integrity of a confidential guest running under AMD SEV-SNP.

AnalysisAI

Improper signature verification in AMD CPU ROM microcode patch loader may allow an attacker with local administrator privilege to load malicious CPU microcode resulting in loss of confidentiality and. Rated high severity (CVSS 7.2). No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-347. Improper signature verification in AMD CPU ROM microcode patch loader may allow an attacker with local administrator privilege to load malicious CPU microcode resulting in loss of confidentiality and integrity of a confidential guest running under AMD SEV-SNP.

Affected ProductsAI

AMD CPU ROM microcode patch loader may.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.