Amd 1St Gen AMD Epyc™ vulnerabilities

9 vulnerabilities

Known vulnerabilities in Amd 1St Gen AMD Epyc™, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.8CVE-2021-26331amd1st gen amd epyc™+60
EPSS score
0.29%
AMD System Management Unit (SMU) contains a potential issue where a malicious user may be able to manipulate mailbox entries leading to arbitrary code execution.7.1CVE-2021-26408amd1st gen amd epyc™+39
EPSS score
0.27%
Insufficient validation of elliptic curve points in SEV-legacy firmware may compromise SEV-legacy guest migration potentially resulting in loss of guest's integrity or confidentiality.5.5CVE-2021-26321amd1st gen amd epyc™+59
EPSS score
0.25%
Insufficient ID command validation in the SEV Firmware may allow a local authenticated attacker to perform a denial of service of the PSP.5.5CVE-2021-26330amd1st gen amd epyc™+60
EPSS score
0.22%
AMD System Management Unit (SMU) may experience a heap-based overflow which may result in a loss of resources.7.5CVE-2021-26322amd1st gen amd epyc™+59
EPSS score
1.05%
Persistent platform private key may not be protected with a random IV leading to a potential “two time pad attack”.5.5CVE-2021-26320amd1st gen amd epyc™+59
EPSS score
0.19%
Insufficient validation of the AMD SEV Signing Key (ASK) in the SEND_START command in the SEV Firmware may allow a local authenticated attacker to perform a denial of service of the PSP5.5CVE-2021-26329amd1st gen amd epyc™+59
EPSS score
0.22%
AMD System Management Unit (SMU) may experience an integer overflow when an invalid length is provided which may result in a potential loss of resources.5.5CVE-2020-12954amd1st gen amd epyc™+60
EPSS score
0.23%
A side effect of an integrated chipset option may be able to be used by an attacker to bypass SPI ROM protections, allowing unauthorized SPI ROM modification.9.8CVE-2023-20520amd1st gen amd epyc™+65
EPSS score
0.79%
Improper access control settings in ASP Bootloader may allow an attacker to corrupt the return address causing a stack-based buffer overrun potentially leading to arbitrary code execution.