Amd Ryzen™ Threadripper™ PRO Processors “Castle Peak” WS SP3 vulnerabilities

4 vulnerabilities

Known vulnerabilities in Amd Ryzen™ Threadripper™ PRO Processors “Castle Peak” WS SP3, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

9.8CVE-2022-23821amdamd ryzen™ embedded 5000+131
EPSS score
0.99%
Improper access control in System Management Mode (SMM) may allow an attacker to write to SPI ROM potentially leading to arbitrary code execution.4.4CVE-2023-20594amd3rd gen amd epyc™ processors+139
EPSS score
0.19%
Improper initialization of variables in the DXE driver may allow a privileged user to leak sensitive information via local access.5.5CVE-2023-20597amdryzen_3_3100_firmware+110
EPSS score
0.18%
Improper initialization of variables in the DXE driver may allow a privileged user to leak sensitive information via local access.5.5CVE-2023-20593amd2nd gen amd epyc™ processors+259
EPSS score
5.19%
An issue in “Zen 2” CPUs, under specific microarchitectural circumstances, may allow an attacker to potentially access sensitive information.