What’s Vulnerable › Vulnerabilities

CVE-2024-36877

• Severity: high (CVSS 8.2 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-08-12 · updated 2026-06-17
• Weakness: CWE-123

Description

Micro-Star International Z-series motherboards (Z590, Z490, and Z790) and B-series motherboards (B760, B560, B660, and B460) with firmware 7D25v14, 7D25v17 to 7D25v19, and 7D25v1A to 7D25v1H was discovered to contain a write-what-where condition in the in the SW handler for SMI 0xE3. Motherboard's with the following chipsets are affected: Intel 300, Intel 400, Intel 500, Intel 600, Intel 700, AMD 300, AMD 400, AMD 500, AMD 600 and AMD 700.

Affected products

• MSI Am4: all versions
• MSI Am5: all versions
• MSI Intel 300: all versions
• MSI Intel 400: all versions
• MSI Intel 500: all versions
• MSI Intel 600: all versions
• MSI Intel 700: all versions

References

• https://csr.msi.com/global/product-security-advisories
• https://jjensn.com/at-home-in-your-firmware/

Get alerted when CVE-2024-36877 or the next vulnerability affects your stack