Amd Epyc 7543 vulnerabilities, page 4
90 vulnerabilities
Known vulnerabilities in Amd Epyc 7543, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2022-23824amda10-9600p_firmware+205
EPSS score0.60%
IBPB may not prevent return branch predictions from being specified by pre-IBPB branch targets leading to a potential information disclosure.CVE-2022-23818amd3rd gen amd epyc™+23EPSS score0.50%
Insufficient input validation on the model
specific register: VM_HSAVE_PA may potentially lead to loss of SEV-SNP guest
memory integrity.CVE-2022-23830amd3rd gen amd epyc™ processors+67EPSS score0.35%
SMM configuration may not be immutable, as intended, when SNP is enabled resulting in a potential limited loss of guest memory integrity.CVE-2024-21978amd3rd gen amd epyc™ processors+89EPSS score0.49%
Improper input validation in SEV-SNP could allow a malicious hypervisor to read or overwrite guest memory potentially leading to data leakage or data corruption.CVE-2024-21980amd3rd gen amd epyc™ processors+89EPSS score0.45%
Improper restriction of write operations in SNP firmware could allow a malicious hypervisor to potentially overwrite a guest's memory or UMC seed resulting in loss of confidentiality and integrity.CVE-2023-20528amd2nd gen epyc+51EPSS score0.25%
Insufficient input validation in the SMU may allow a physical attacker to exfiltrate SMU memory contents over the I2C bus potentially leading to a loss of confidentiality.CVE-2023-20523amd2nd gen epyc+51EPSS score0.18%
TOCTOU in the ASP may allow a physical attacker to write beyond the buffer bounds, potentially leading to a loss of integrity or denial of service.CVE-2023-20529amd2nd gen epyc+51EPSS score0.63%
Insufficient bound checks in the SMU may allow an attacker to update the from/to address space to an invalid value potentially resulting in a denial of service.CVE-2023-20532amd2nd gen epyc+51EPSS score0.57%
Insufficient input validation in the SMU may allow an attacker to improperly lock resources, potentially resulting in a denial of service.CVE-2023-20530amd3rd gen epyc+24EPSS score0.63%
Insufficient input validation of BIOS mailbox messages in SMU may result in out-of-bounds memory reads potentially resulting in a denial of service.CVE-2023-20584amdepyc_7203_firmware+66EPSS score0.19%
IOMMU improperly handles certain special address
ranges with invalid device table entries (DTEs), which may allow an attacker
with privileges and a compromised Hypervisor to
induce DTE faults to bypass RMP checks in SEV-SNP, potentially leading to a
loss of guest integrity.CVE-2023-20533amd2nd gen amd epyc™ processors+96EPSS score0.50%
Insufficient DRAM address validation in System
Management Unit (SMU) may allow an attacker to read/write from/to an invalid
DRAM address, potentially resulting in denial-of-service.CVE-2023-20566amd3rd gen amd epyc™ processors+68EPSS score0.37%
Improper address validation in ASP with SNP enabled may potentially allow an attacker to compromise guest memory integrity.CVE-2023-20524amd2nd gen amd epyc™+49EPSS score0.49%
An attacker with a compromised ASP could
possibly send malformed commands to an ASP on another CPU, resulting in an out
of bounds write, potentially leading to a loss a loss of integrity.CVE-2023-20592amd1st gen amd epyc™ processors+91EPSS score1.02%
Improper or unexpected behavior of the INVD instruction in some AMD CPUs may allow an attacker with a malicious hypervisor to affect cache line write-back behavior of the CPU leading to a potential loss of guest virtual machine (VM) memory integrity.CVE-2023-20594amd3rd gen amd epyc™ processors+139EPSS score0.19%
Improper initialization of variables in the DXE driver may allow a privileged user to leak sensitive information via local access.CVE-2023-20527amd1st gen epyc+66EPSS score0.61%
Improper syscall input validation in the ASP Bootloader may allow a privileged attacker to read memory out-of-bounds, potentially leading to a denial-of-service.CVE-2023-20521amd1st gen amd epyc™ processors+106EPSS score0.26%
TOCTOU in the ASP Bootloader may allow an attacker with physical access to tamper with SPI ROM records after memory content verification, potentially leading to loss of confidentiality or a denial of service.CVE-2023-20520amd1st gen amd epyc™+65EPSS score0.79%
Improper access control settings in ASP
Bootloader may allow an attacker to corrupt the return address causing a
stack-based buffer overrun potentially leading to arbitrary code execution.CVE-2023-20578amdepyc_7001_firmware+104EPSS score0.12%
A TOCTOU (Time-Of-Check-Time-Of-Use) in SMM may allow
an attacker with ring0 privileges and access to the
BIOS menu or UEFI shell to modify the communications buffer potentially
resulting in arbitrary code execution.