1G
Product
1st Gen AMD EPYC™ Processors
14
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 1High 6Medium 7Low 0
Watch
Add 1st Gen AMD EPYC™ Processors to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-23829 | 8.2 | Jun 18 | A potential weakness in AMD SPI protection features may allow a malicious attacker with Ring0 (kernel mode) access to bypass the native System Management Mode (SMM) ROM… Affected: various |
| CVE-2023-31315 | 7.5 | Aug 9 | Improper validation in a model specific register (MSR) could allow a malicious program with ring0 access to modify SMM configuration while SMI lock is enabled, potentially leading… Affected: various before Naples PI 1.0.0.M |
| CVE-2021-46774 | 7.5 | Nov 14 | Insufficient DRAM address validation in System Management Unit (SMU) may allow an attacker to read/write from/to an invalid DRAM address, potentially resulting in… Affected: various |
| CVE-2021-26406 | 7.5 | May 9 | Insufficient validation in parsing Owner's Certificate Authority (OCA) certificates in SEV (AMD Secure Encrypted Virtualization) and SEV-ES user application can lead to a host… Affected: various |
| CVE-2021-26356 | 7.4 | May 9 | A TOCTOU in ASP bootloader may allow an attacker to tamper with the SPI ROM following data read to memory potentially resulting in S3 data corruption and information disclosure Affected: various |
| CVE-2023-20587 | 7.1 | Feb 13 | Improper Access Control in System Management Mode (SMM) may allow an attacker access to the SPI flash potentially leading to arbitrary code execution Affected: various |
Showing 6