{"id":"CVE-2024-36309","kind":"vulnerability","aliases":["CVE-2024-36309"],"related":[],"title":"AMD NBIO: missing lock bit lets privileged attacker remap disabled devices","description":"Missing Lock Bit Protection in the Northbridge IO (NBIO) could allow a privileged attacker to use an intentionally disabled device as part of a remapping attack potentially impacting data confidentiality, integrity, or availability.","summary":"AMD Northbridge IO (NBIO) lacks lock-bit protection, so a privileged attacker can re-enable an intentionally disabled device and use it in a remapping attack. The sources say this can affect data confidentiality, integrity, or availability.","severity":"medium","cvss":4.6,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["amd","bare-metal","firmware","infrastructure","servers"],"not_affected_if":["no-privileged-untrusted-users"],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T23:17:18+00:00","first_seen_at":"2026-11-10T23:27:34+00:00","triaged_at":"2026-11-10T23:28:53+00:00","updated_at":"2026-11-10T23:28:53+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-11-10T23:28:53Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"AMD NBIO: missing lock bit lets privileged attacker remap disabled devices","impact":"medium","summary":"AMD Northbridge IO (NBIO) lacks lock-bit protection, so a privileged attacker can re-enable an intentionally disabled device and use it in a remapping attack. The sources say this can affect data confidentiality, integrity, or availability.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["amd","firmware","servers","bare-metal"],"confidence":0.5,"fix_status":"unknown","needs_auth":"yes","worst_case":"privileged attacker remaps a disabled device to reach data","analyst_note":"Find AMD's security bulletin for CVE-2024-36309 to list affected processor families and fixed firmware/BIOS versions.","how_to_check":"unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["no-privileged-untrusted-users"],"who_is_affected":"Affects AMD processors with the NBIO component. Exploitation requires privileged access on the machine, so systems without untrusted privileged users carry less risk. The sources do not list specific affected models or firmware versions.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000686,"input_tokens":4539,"output_tokens":464,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-2024':13A,16A '-36309':14A,17A 'affect':58B 'allow':74C 'amd':1A,18B,25B 'attack':8A,37B,52B,77C,89C 'avail':63B,96C 'bare':20B 'bare-met':19B 'bit':5A,32B,66C 'confidenti':60B,93C 'could':73C 'cve':12A,15A 'data':59B,92C 'devic':11A,45B,83C 'disabl':10A,44B,82C 'enabl':41B 'firmwar':22B 'impact':91C 'infrastructur':23B 'integr':61B,94C 'intent':43B,81C 'io':27B,71C 'lack':29B 'let':6A 'lock':4A,31B,65C 'lock-bit':30B 'metal':21B 'miss':3A,64C 'nbio':2A,28B,72C 'northbridg':26B,70C 'part':85C 'potenti':90C 'privileg':7A,36B,76C 'protect':33B,67C 're':40B 're-en':39B 'remap':9A,51B,88C 'say':55B 'server':24B 'sourc':54B 'use':47B,79C","nicknames":[],"mitigations":[],"who_affected":"Affects AMD processors with the NBIO component. Exploitation requires privileged access on the machine, so systems without untrusted privileged users carry less risk. The sources do not list specific affected models or firmware versions.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["amd","baremetal","firmware","infrastructure","medium","servers"],"campaign_type":null,"search_a":"'-2024':13A,16A '-36309':14A,17A 'amd':1A 'attack':8A 'bit':5A 'cve':12A,15A 'devic':11A 'disabl':10A 'let':6A 'lock':4A 'miss':3A 'nbio':2A 'privileg':7A 'remap':9A","search_b":"'affect':58B 'amd':18B,25B 'attack':37B,52B 'avail':63B 'bare':20B 'bare-met':19B 'bit':32B 'confidenti':60B 'data':59B 'devic':45B 'disabl':44B 'enabl':41B 'firmwar':22B 'infrastructur':23B 'integr':61B 'intent':43B 'io':27B 'lack':29B 'lock':31B 'lock-bit':30B 'metal':21B 'nbio':28B 'northbridg':26B 'privileg':36B 'protect':33B 're':40B 're-en':39B 'remap':51B 'say':55B 'server':24B 'sourc':54B 'use':47B","search_c":"'allow':74C 'attack':77C,89C 'avail':96C 'bit':66C 'confidenti':93C 'could':73C 'data':92C 'devic':83C 'disabl':82C 'impact':91C 'integr':94C 'intent':81C 'io':71C 'lock':65C 'miss':64C 'nbio':72C 'northbridg':70C 'part':85C 'potenti':90C 'privileg':76C 'protect':67C 'remap':88C 'use':79C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T23:17:18+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"psirt@amd.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2024-36309","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-36309","severity":null,"published_at":"2026-11-10T23:17:18+00:00","modified_at":"2026-11-10T23:17:18+00:00","first_seen_at":"2026-11-10T23:27:34+00:00","fetched_at":"2026-11-10T23:27:34+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}