AMD Ryzen™ Threadripper™ 2000 Series Processors “Colfax” vulnerabilities
2 vulnerabilities
Known vulnerabilities in AMD Ryzen™ Threadripper™ 2000 Series Processors “Colfax”, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
RoutineCVE-2023-20526amd · 1st gen amd epyc™ processors +79 moreamd 1st gen amd epyc™ processorsInsufficient input validation in the ASP Bootloader may enable a privileged attacker with physical access to expose the contents of ASP memory potentially leading to a loss of confidentiality.CVSS4.6MediumEPSS0.31%RoutineCVE-2022-23820amd · 3rd gen amd epyc™ processors +123 moreamd 3rd gen amd epyc™ processorsFailure to validate the AMD SMM communication buffer
may allow an attacker to corrupt the SMRAM potentially leading to arbitrary
code execution.CVSS9.8CriticalEPSS0.70%