CVE-2024-2315: AMI Aptio V

High severity, CVSS 7.1. EPSS: 0.1% chance of exploitation in the next 30 days.

APTIOV contains a vulnerability in BIOS where may cause Improper Access Control by a local attacker. Successful exploitation of this vulnerability may lead to unexpected SPI flash modifications and BIOS boot kit launches, also impacting the availability.

Affected products

• AMI Aptio V: from 5.0, before 5.037 (fixed in 5.037)

Published 2024-11-12. Last modified 2026-06-17.