Amd 2Nd Gen AMD Epyc™ vulnerabilities
19 vulnerabilities
Known vulnerabilities in Amd 2Nd Gen AMD Epyc™, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2021-26370amd2nd gen amd epyc™+50
EPSS score0.23%
Improper validation of destination address in SVC_LOAD_FW_IMAGE_BY_INSTANCE and SVC_LOAD_BINARY_BY_ATTRIB in a malicious UApp or ABL may allow an attacker to overwrite arbitrary bootloader memory with SPI ROM contents resulting in a loss of integrity and availability.CVE-2021-26379amd2nd gen amd epyc™+49EPSS score0.68%
Insufficient input validation of mailbox data in the
SMU may allow an attacker to coerce the SMU to corrupt SMRAM, potentially
leading to a loss of integrity and privilege escalation.CVE-2021-26331amd1st gen amd epyc™+60EPSS score0.29%
AMD System Management Unit (SMU) contains a potential issue where a malicious user may be able to manipulate mailbox entries leading to arbitrary code execution.CVE-2021-26408amd1st gen amd epyc™+39EPSS score0.27%
Insufficient validation of elliptic curve points in SEV-legacy firmware may compromise SEV-legacy guest migration potentially resulting in loss of guest's integrity or confidentiality.CVE-2021-26321amd1st gen amd epyc™+59EPSS score0.25%
Insufficient ID command validation in the SEV Firmware may allow a local authenticated attacker to perform a denial of service of the PSP.CVE-2021-26338amd2nd gen amd epyc™+45EPSS score0.93%
Improper access controls in System Management Unit (SMU) may allow for an attacker to override performance control tables located in DRAM resulting in a potential lack of system resources.CVE-2021-26330amd1st gen amd epyc™+60EPSS score0.22%
AMD System Management Unit (SMU) may experience a heap-based overflow which may result in a loss of resources.CVE-2021-26322amd1st gen amd epyc™+59EPSS score1.05%
Persistent platform private key may not be protected with a random IV leading to a potential “two time pad attack”.CVE-2021-26320amd1st gen amd epyc™+59EPSS score0.19%
Insufficient validation of the AMD SEV Signing Key (ASK) in the SEND_START command in the SEV Firmware may allow a local authenticated attacker to perform a denial of service of the PSPCVE-2021-26329amd1st gen amd epyc™+59EPSS score0.22%
AMD System Management Unit (SMU) may experience an integer overflow when an invalid length is provided which may result in a potential loss of resources.CVE-2021-46775amd2nd gen amd epyc™+49EPSS score0.32%
Improper input validation in ABL may enable an
attacker with physical access, to perform arbitrary memory overwrites,
potentially leading to a loss of integrity and code execution.CVE-2021-46763amd2nd gen amd epyc™+49EPSS score0.49%
Insufficient input validation in the SMU may
enable a privileged attacker to write beyond the intended bounds of a shared
memory buffer potentially leading to a loss of integrity.CVE-2021-46762amd2nd gen amd epyc™+51EPSS score0.35%
Insufficient input validation in the SMU may
allow an attacker to corrupt SMU SRAM potentially leading to a loss of
integrity or denial of service.CVE-2021-46769amd2nd gen amd epyc™+49EPSS score0.78%
Insufficient syscall input validation in the ASP
Bootloader may allow a privileged attacker to execute arbitrary DMA copies,
which can lead to code execution.CVE-2021-46764amd2nd gen amd epyc™+49EPSS score0.63%
Improper validation of DRAM addresses in SMU may
allow an attacker to overwrite sensitive memory locations within the ASP
potentially resulting in a denial of service.CVE-2020-12954amd1st gen amd epyc™+60EPSS score0.23%
A side effect of an integrated chipset option may be able to be used by an attacker to bypass SPI ROM protections, allowing unauthorized SPI ROM modification.CVE-2020-12961amd2nd gen amd epyc™+46EPSS score0.25%
A potential vulnerability exists in AMD Platform Security Processor (PSP) that may allow an attacker to zero any privileged register on the System Management Network which may lead to bypassing SPI ROM protections.CVE-2023-20524amd2nd gen amd epyc™+49EPSS score0.49%
An attacker with a compromised ASP could
possibly send malformed commands to an ASP on another CPU, resulting in an out
of bounds write, potentially leading to a loss a loss of integrity.CVE-2023-20520amd1st gen amd epyc™+65EPSS score0.79%
Improper access control settings in ASP
Bootloader may allow an attacker to corrupt the return address causing a
stack-based buffer overrun potentially leading to arbitrary code execution.