Amd 3Rd Gen AMD Epyc™ vulnerabilities, page 2
28 vulnerabilities
Known vulnerabilities in Amd 3Rd Gen AMD Epyc™, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2021-46762amd2nd gen amd epyc™+51
EPSS score0.35%
Insufficient input validation in the SMU may
allow an attacker to corrupt SMU SRAM potentially leading to a loss of
integrity or denial of service.CVE-2021-46769amd2nd gen amd epyc™+49EPSS score0.78%
Insufficient syscall input validation in the ASP
Bootloader may allow a privileged attacker to execute arbitrary DMA copies,
which can lead to code execution.CVE-2021-46764amd2nd gen amd epyc™+49EPSS score0.63%
Improper validation of DRAM addresses in SMU may
allow an attacker to overwrite sensitive memory locations within the ASP
potentially resulting in a denial of service.CVE-2020-12954amd1st gen amd epyc™+60EPSS score0.23%
A side effect of an integrated chipset option may be able to be used by an attacker to bypass SPI ROM protections, allowing unauthorized SPI ROM modification.CVE-2020-12961amd2nd gen amd epyc™+46EPSS score0.25%
A potential vulnerability exists in AMD Platform Security Processor (PSP) that may allow an attacker to zero any privileged register on the System Management Network which may lead to bypassing SPI ROM protections.CVE-2022-23818amd3rd gen amd epyc™+23EPSS score0.50%
Insufficient input validation on the model
specific register: VM_HSAVE_PA may potentially lead to loss of SEV-SNP guest
memory integrity.CVE-2023-20524amd2nd gen amd epyc™+49EPSS score0.49%
An attacker with a compromised ASP could
possibly send malformed commands to an ASP on another CPU, resulting in an out
of bounds write, potentially leading to a loss a loss of integrity.CVE-2023-20520amd1st gen amd epyc™+65EPSS score0.79%
Improper access control settings in ASP
Bootloader may allow an attacker to corrupt the return address causing a
stack-based buffer overrun potentially leading to arbitrary code execution.