AMD Ryzen™ Embedded R1000 vulnerabilities
5 vulnerabilities
Known vulnerabilities in AMD Ryzen™ Embedded R1000, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2021-26392amdamd_3015ce_firmware+110
EPSS score0.28%
Insufficient verification of missing size check in 'LoadModule' may lead to an out-of-bounds write potentially allowing an attacker with privileges to gain code execution of the OS/kernel by loading a malicious TA.CVE-2021-26393amdamd_3015ce_firmware+72EPSS score0.27%
Insufficient memory cleanup in the AMD Secure Processor (ASP) Trusted Execution Environment (TEE) may allow an authenticated attacker with privileges to generate a valid signed TA and potentially poison the contents of the process memory with attacker controlled data resulting in a loss of confidentiality.CVE-2021-46754amdamd ryzen™ embedded r1000+68EPSS score0.56%
Insufficient input validation in the ASP (AMD
Secure Processor) bootloader may allow an attacker with a compromised Uapp or
ABL to coerce the bootloader into exposing sensitive information to the SMU
(System Management Unit) resulting in a potential loss of confidentiality and
integrity.CVE-2023-20521amd1st gen amd epyc™ processors+106EPSS score0.26%
TOCTOU in the ASP Bootloader may allow an attacker with physical access to tamper with SPI ROM records after memory content verification, potentially leading to loss of confidentiality or a denial of service.CVE-2023-31315amd1st gen amd epyc™ processors+74EPSS score0.63%
Improper validation in a model specific register (MSR) could allow a malicious program with ring0 access to modify SMM configuration while SMI lock is enabled, potentially leading to arbitrary code execution.