AMD Ryzen™ Embedded V2000 vulnerabilities
6 vulnerabilities
Known vulnerabilities in AMD Ryzen™ Embedded V2000, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2021-26392amdamd_3015ce_firmware+110
EPSS score0.28%
Insufficient verification of missing size check in 'LoadModule' may lead to an out-of-bounds write potentially allowing an attacker with privileges to gain code execution of the OS/kernel by loading a malicious TA.CVE-2021-26393amdamd_3015ce_firmware+72EPSS score0.27%
Insufficient memory cleanup in the AMD Secure Processor (ASP) Trusted Execution Environment (TEE) may allow an authenticated attacker with privileges to generate a valid signed TA and potentially poison the contents of the process memory with attacker controlled data resulting in a loss of confidentiality.CVE-2021-46754amdamd ryzen™ embedded r1000+68EPSS score0.56%
Insufficient input validation in the ASP (AMD
Secure Processor) bootloader may allow an attacker with a compromised Uapp or
ABL to coerce the bootloader into exposing sensitive information to the SMU
(System Management Unit) resulting in a potential loss of confidentiality and
integrity.CVE-2021-46757amdamd ryzen™ embedded 5000+11EPSS score0.18%
Insufficient checking of memory buffer in ASP
Secure OS may allow an attacker with a malicious TA to read/write to the ASP
Secure OS kernel virtual address space potentially leading to privilege
escalation.CVE-2023-20579amdamd ryzen™ 3000 series processors with radeon™ graphics+142EPSS score0.16%
Improper
Access Control in the AMD SPI protection feature may allow a user with Ring0
(kernel mode) privileged access to bypass protections potentially resulting in
loss of integrity and availability.CVE-2023-31315amd1st gen amd epyc™ processors+74EPSS score0.63%
Improper validation in a model specific register (MSR) could allow a malicious program with ring0 access to modify SMM configuration while SMI lock is enabled, potentially leading to arbitrary code execution.