Amd Epyc 7H12 vulnerabilities, page 3
56 vulnerabilities
Known vulnerabilities in Amd Epyc 7H12, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
MediumCVE-2022-23825amd · a10-9600p_firmware +255 moreamd a10-9600p_firmwareAliases in the branch predictor may cause some AMD processors to predict the wrong branch type potentially leading to information disclosure.EPSS0.78%LowCVE-2023-20528amd · 2nd gen epyc +51 moreamd 2nd gen epycInsufficient input validation in the SMU may allow a physical attacker to exfiltrate SMU memory contents over the I2C bus potentially leading to a loss of confidentiality.EPSS0.25%MediumCVE-2023-20523amd · 2nd gen epyc +51 moreamd 2nd gen epycTOCTOU in the ASP may allow a physical attacker to write beyond the buffer bounds, potentially leading to a loss of integrity or denial of service.EPSS0.18%HighCVE-2023-20529amd · 2nd gen epyc +51 moreamd 2nd gen epycInsufficient bound checks in the SMU may allow an attacker to update the from/to address space to an invalid value potentially resulting in a denial of service.EPSS0.63%MediumCVE-2023-20532amd · 2nd gen epyc +51 moreamd 2nd gen epycInsufficient input validation in the SMU may allow an attacker to improperly lock resources, potentially resulting in a denial of service.EPSS0.57%HighCVE-2023-20533amd · 2nd gen amd epyc™ processors +96 moreamd 2nd gen amd epyc™ processorsInsufficient DRAM address validation in System
Management Unit (SMU) may allow an attacker to read/write from/to an invalid
DRAM address, potentially resulting in denial-of-service.EPSS0.50%HighCVE-2023-20524amd · 2nd gen amd epyc™ +49 moreamd 2nd gen amd epyc™An attacker with a compromised ASP could
possibly send malformed commands to an ASP on another CPU, resulting in an out
of bounds write, potentially leading to a loss a loss of integrity.EPSS0.49%MediumCVE-2023-20592amd · 1st gen amd epyc™ processors +91 moreamd 1st gen amd epyc™ processorsImproper or unexpected behavior of the INVD instruction in some AMD CPUs may allow an attacker with a malicious hypervisor to affect cache line write-back behavior of the CPU leading to a potential loss of guest virtual machine (VM) memory integrity.EPSS1.02%MediumCVE-2023-20527amd · 1st gen epyc +66 moreamd 1st gen epycImproper syscall input validation in the ASP Bootloader may allow a privileged attacker to read memory out-of-bounds, potentially leading to a denial-of-service.EPSS0.61%MediumCVE-2023-20521amd · 1st gen amd epyc™ processors +106 moreamd 1st gen amd epyc™ processorsTOCTOU in the ASP Bootloader may allow an attacker with physical access to tamper with SPI ROM records after memory content verification, potentially leading to loss of confidentiality or a denial of service.EPSS0.26%CriticalCVE-2023-20520amd · 1st gen amd epyc™ +65 moreamd 1st gen amd epyc™Improper access control settings in ASP
Bootloader may allow an attacker to corrupt the return address causing a
stack-based buffer overrun potentially leading to arbitrary code execution.EPSS0.79%HighCVE-2023-20578amd · epyc_7001_firmware +104 moreamd epyc_7001_firmwareA TOCTOU (Time-Of-Check-Time-Of-Use) in SMM may allow
an attacker with ring0 privileges and access to the
BIOS menu or UEFI shell to modify the communications buffer potentially
resulting in arbitrary code execution.EPSS0.12%HighCVE-2023-20531amd · 2nd gen epyc +51 moreamd 2nd gen epycInsufficient bound checks in the SMU may allow an attacker to update the SRAM from/to address space to an invalid value potentially resulting in a denial of service.EPSS0.63%MediumCVE-2023-20526amd · 1st gen amd epyc™ processors +79 moreamd 1st gen amd epyc™ processorsInsufficient input validation in the ASP Bootloader may enable a privileged attacker with physical access to expose the contents of ASP memory potentially leading to a loss of confidentiality.EPSS0.31%MediumCVE-2023-20593amd · 2nd gen amd epyc™ processors +259 moreamd 2nd gen amd epyc™ processorsAn issue in “Zen 2” CPUs, under specific microarchitectural circumstances, may allow an attacker to potentially access sensitive information.EPSS5.19%MediumCVE-2023-20525amd · 2nd gen epyc +51 moreamd 2nd gen epycInsufficient syscall input validation in the ASP Bootloader may allow a privileged attacker to read memory outside the bounds of a mapped register potentially leading to a denial of service.EPSS0.61%