Amd Epyc 7001 vulnerabilities, page 2
27 vulnerabilities
Known vulnerabilities in Amd Epyc 7001, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2022-23824amda10-9600p_firmware+205
EPSS score0.60%
IBPB may not prevent return branch predictions from being specified by pre-IBPB branch targets leading to a potential information disclosure.CVE-2022-23825amda10-9600p_firmware+255EPSS score0.78%
Aliases in the branch predictor may cause some AMD processors to predict the wrong branch type potentially leading to information disclosure.CVE-2023-20592amd1st gen amd epyc™ processors+91EPSS score1.02%
Improper or unexpected behavior of the INVD instruction in some AMD CPUs may allow an attacker with a malicious hypervisor to affect cache line write-back behavior of the CPU leading to a potential loss of guest virtual machine (VM) memory integrity.CVE-2023-20527amd1st gen epyc+66EPSS score0.60%
Improper syscall input validation in the ASP Bootloader may allow a privileged attacker to read memory out-of-bounds, potentially leading to a denial-of-service.CVE-2023-20521amd1st gen amd epyc™ processors+106EPSS score0.26%
TOCTOU in the ASP Bootloader may allow an attacker with physical access to tamper with SPI ROM records after memory content verification, potentially leading to loss of confidentiality or a denial of service.CVE-2023-20578amdepyc_7001_firmware+104EPSS score0.12%
A TOCTOU (Time-Of-Check-Time-Of-Use) in SMM may allow
an attacker with ring0 privileges and access to the
BIOS menu or UEFI shell to modify the communications buffer potentially
resulting in arbitrary code execution.CVE-2023-20526amd1st gen amd epyc™ processors+79EPSS score0.31%
Insufficient input validation in the ASP Bootloader may enable a privileged attacker with physical access to expose the contents of ASP memory potentially leading to a loss of confidentiality.