Amd Ryzen Threadripper 2970Wx vulnerabilities, page 2
33 vulnerabilities
Known vulnerabilities in Amd Ryzen Threadripper 2970Wx, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2020-12965amdall supported processors+63
EPSS score2.35%
When combined with specific software sequences, AMD CPUs may transiently execute non-canonical loads and store using only the lower 48 address bits potentially resulting in data leakage.CVE-2022-29900amda10-9600p_firmware+214EPSS score3.94%
Mis-trained branch predictions for return instructions may allow arbitrary speculative code execution under certain microarchitecture-dependent conditions.CVE-2022-27672amd1st gen amd epyc™ processors+274EPSS score0.28%
When SMT is enabled, certain AMD processors may speculatively execute instructions using a target
from the sibling thread after an SMT mode switch potentially resulting in information disclosure.CVE-2022-23823amda10-9600p_firmware+142EPSS score1.17%
A potential vulnerability in some AMD processors using frequency scaling may allow an authenticated attacker to execute a timing attack to potentially enable information disclosure.CVE-2022-23824amda10-9600p_firmware+205EPSS score0.60%
IBPB may not prevent return branch predictions from being specified by pre-IBPB branch targets leading to a potential information disclosure.CVE-2022-23825amda10-9600p_firmware+255EPSS score0.78%
Aliases in the branch predictor may cause some AMD processors to predict the wrong branch type potentially leading to information disclosure.CVE-2022-23821amdamd ryzen™ embedded 5000+131EPSS score0.99%
Improper access control in System Management Mode (SMM) may allow an attacker to write to SPI ROM potentially leading to arbitrary code execution.CVE-2022-23820amd3rd gen amd epyc™ processors+123EPSS score0.70%
Failure to validate the AMD SMM communication buffer
may allow an attacker to corrupt the SMRAM potentially leading to arbitrary
code execution.CVE-2023-20589amd4700s_firmware+143EPSS score0.58%
An attacker with specialized hardware and physical access to an impacted device may be able to perform a voltage fault injection attack resulting in compromise of the ASP secure boot potentially leading to arbitrary code execution.CVE-2023-20558amd2nd gen amd ryzen™ threadripper™ processor+95EPSS score0.67%
Insufficient control flow management in AmdCpmOemSmm may allow a privileged attacker to tamper with the SMM handler potentially leading to an escalation of privileges.CVE-2023-20559amd2nd gen amd ryzen™ threadripper™ processor+95EPSS score0.67%
Insufficient control flow management in AmdCpmGpioInitSmm may allow a privileged attacker to tamper with the SMM handler potentially leading to escalation of privileges.CVE-2023-20521amd1st gen amd epyc™ processors+106EPSS score0.26%
TOCTOU in the ASP Bootloader may allow an attacker with physical access to tamper with SPI ROM records after memory content verification, potentially leading to loss of confidentiality or a denial of service.CVE-2023-20526amd1st gen amd epyc™ processors+79EPSS score0.31%
Insufficient input validation in the ASP Bootloader may enable a privileged attacker with physical access to expose the contents of ASP memory potentially leading to a loss of confidentiality.