Amd Ryzen™ Threadripper™ 2000 Series Processors “Colfax” vulnerabilities

2 vulnerabilities

Known vulnerabilities in Amd Ryzen™ Threadripper™ 2000 Series Processors “Colfax”, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

9.8CVE-2022-23821amdamd ryzen™ embedded 5000+131
EPSS score
0.99%
Improper access control in System Management Mode (SMM) may allow an attacker to write to SPI ROM potentially leading to arbitrary code execution.5.7CVE-2023-20521amd1st gen amd epyc™ processors+106
EPSS score
0.26%
TOCTOU in the ASP Bootloader may allow an attacker with physical access to tamper with SPI ROM records after memory content verification, potentially leading to loss of confidentiality or a denial of service.