Time-of-check time-of-use race condition in AMD Athlon™ 3000 Series Desktop Processors…
Key facts
- Attack vector
- Physical
- Privileges required
- None
- User interaction
- None
- Attack complexity
- High
- Impact type
- —
- Confidentiality · integrity · availability
- High · None · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA.
Summary
TOCTOU in the ASP Bootloader may allow an attacker with physical access to tamper with SPI ROM records after memory content verification, potentially leading to loss of confidentiality or a denial of service.
Why it matters now
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| AMD | Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics “Picasso” AM4 | various | — | No fix listed | CNA |
| AMD | Ryzen™ Threadripper™ 2000 Series Processors “Colfax” | various | — | No fix listed | CNA |
| AMD | Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Dali”/”Dali” FP5 | various | — | No fix listed | CNA |
| AMD | Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Pollock” | various | — | No fix listed | CNA |
| AMD | Ryzen™ 3000 Series Mobile Processor with Radeon™ Graphics “Picasso” FP5 | various | — | No fix listed | CNA |
| AMD | 1st Gen AMD EPYC™ Processors | various | — | No fix listed | CNA |
| AMD | 2nd Gen AMD EPYC™ Processors | various | — | No fix listed | CNA |
| AMD | 3rd Gen AMD EPYC™ Processors | various | — | No fix listed | CNA |
| AMD | AMD EPYC™ Embedded 3000 | various | — | No fix listed | CNA |
| AMD | AMD EPYC™ Embedded 7002 | various | — | No fix listed | CNA |
| AMD | AMD EPYC™ Embedded 7003 | various | — | No fix listed | CNA |
| AMD | AMD Ryzen™ Embedded R1000 | various | — | No fix listed | CNA |
| AMD | AMD Ryzen™ Embedded R2000 | various | — | No fix listed | CNA |
| AMD | AMD Ryzen™ Embedded V1000 | various | — | No fix listed | CNA |
- Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics “Picasso” AM4 VendorAMD Affected various Fixed in — No fix listed CNA
- Ryzen™ Threadripper™ 2000 Series Processors “Colfax” VendorAMD Affected various Fixed in — No fix listed CNA
- Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Dali”/”Dali” FP5 VendorAMD Affected various Fixed in — No fix listed CNA
- Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Pollock” VendorAMD Affected various Fixed in — No fix listed CNA
- Ryzen™ 3000 Series Mobile Processor with Radeon™ Graphics “Picasso” FP5 VendorAMD Affected various Fixed in — No fix listed CNA
- 1st Gen AMD EPYC™ Processors VendorAMD Affected various Fixed in — No fix listed CNA
- 2nd Gen AMD EPYC™ Processors VendorAMD Affected various Fixed in — No fix listed CNA
- 3rd Gen AMD EPYC™ Processors VendorAMD Affected various Fixed in — No fix listed CNA
- AMD EPYC™ Embedded 3000 VendorAMD Affected various Fixed in — No fix listed CNA
- AMD EPYC™ Embedded 7002 VendorAMD Affected various Fixed in — No fix listed CNA
- AMD EPYC™ Embedded 7003 VendorAMD Affected various Fixed in — No fix listed CNA
- AMD Ryzen™ Embedded R1000 VendorAMD Affected various Fixed in — No fix listed CNA
- AMD Ryzen™ Embedded R2000 VendorAMD Affected various Fixed in — No fix listed CNA
- AMD Ryzen™ Embedded V1000 VendorAMD Affected various Fixed in — No fix listed CNA
CPE configurations NVD · 186
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:amd:epyc_7001_firmware:*:*:*:*:*:*:*:* | before naplespi_1.0.0.h | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7001:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7251_firmware:*:*:*:*:*:*:*:* | before naplespi_1.0.0.h | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7251:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7261_firmware:*:*:*:*:*:*:*:* | before naplespi_1.0.0.h | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7261:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7281_firmware:*:*:*:*:*:*:*:* | before naplespi_1.0.0.h | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7281:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7301_firmware:*:*:*:*:*:*:*:* | before naplespi_1.0.0.h | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7301:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
- cpe:2.3:o:amd:epyc_7001_firmware:*:*:*:*:*:*:*:* Versions before naplespi_1.0.0.h Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7001:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7251_firmware:*:*:*:*:*:*:*:* Versions before naplespi_1.0.0.h Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7251:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7261_firmware:*:*:*:*:*:*:*:* Versions before naplespi_1.0.0.h Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7261:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7281_firmware:*:*:*:*:*:*:*:* Versions before naplespi_1.0.0.h Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7281:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7301_firmware:*:*:*:*:*:*:*:* Versions before naplespi_1.0.0.h Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7301:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
Show 176 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:amd:epyc_7351_firmware:*:*:*:*:*:*:*:* | before naplespi_1.0.0.h | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7351:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7351p_firmware:*:*:*:*:*:*:*:* | before naplespi_1.0.0.h | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7351p:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7371_firmware:*:*:*:*:*:*:*:* | before naplespi_1.0.0.h | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7371:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7401_firmware:*:*:*:*:*:*:*:* | before naplespi_1.0.0.h | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7401:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7401p_firmware:*:*:*:*:*:*:*:* | before naplespi_1.0.0.h | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7401p:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7451_firmware:*:*:*:*:*:*:*:* | before naplespi_1.0.0.h | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7451:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7501_firmware:*:*:*:*:*:*:*:* | before naplespi_1.0.0.h | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7501:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7551_firmware:*:*:*:*:*:*:*:* | before naplespi_1.0.0.h | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7551:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7551p_firmware:*:*:*:*:*:*:*:* | before naplespi_1.0.0.h | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7551p:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7601_firmware:*:*:*:*:*:*:*:* | before naplespi_1.0.0.h | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7601:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7232p_firmware:*:*:*:*:*:*:*:* | before romepi_1.0.0.d | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7232p:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7252_firmware:*:*:*:*:*:*:*:* | before romepi_1.0.0.d | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7252:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7262_firmware:*:*:*:*:*:*:*:* | before romepi_1.0.0.d | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7262:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7272_firmware:*:*:*:*:*:*:*:* | before romepi_1.0.0.d | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7272:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7282_firmware:*:*:*:*:*:*:*:* | before romepi_1.0.0.d | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7282:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7302_firmware:*:*:*:*:*:*:*:* | before romepi_1.0.0.d | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7302:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7302p_firmware:*:*:*:*:*:*:*:* | before romepi_1.0.0.d | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7302p:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7352_firmware:*:*:*:*:*:*:*:* | before romepi_1.0.0.d | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7352:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7402_firmware:*:*:*:*:*:*:*:* | before romepi_1.0.0.d | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7402:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7402p_firmware:*:*:*:*:*:*:*:* | before romepi_1.0.0.d | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7402p:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7452_firmware:*:*:*:*:*:*:*:* | before romepi_1.0.0.d | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7452:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7502_firmware:*:*:*:*:*:*:*:* | before romepi_1.0.0.d | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7502:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7502p_firmware:*:*:*:*:*:*:*:* | before romepi_1.0.0.d | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7502p:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7532_firmware:*:*:*:*:*:*:*:* | before romepi_1.0.0.d | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7532:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7542_firmware:*:*:*:*:*:*:*:* | before romepi_1.0.0.d | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7542:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7552_firmware:*:*:*:*:*:*:*:* | before romepi_1.0.0.d | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7552:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7642_firmware:*:*:*:*:*:*:*:* | before romepi_1.0.0.d | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7642:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7662_firmware:*:*:*:*:*:*:*:* | before romepi_1.0.0.d | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7662:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7702_firmware:*:*:*:*:*:*:*:* | before romepi_1.0.0.d | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7702:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7702p_firmware:*:*:*:*:*:*:*:* | before romepi_1.0.0.d | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7702p:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7742_firmware:*:*:*:*:*:*:*:* | before romepi_1.0.0.d | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7742:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7f32_firmware:*:*:*:*:*:*:*:* | before romepi_1.0.0.d | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7f32:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7f52_firmware:*:*:*:*:*:*:*:* | before romepi_1.0.0.d | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7f52:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7f72_firmware:*:*:*:*:*:*:*:* | before romepi_1.0.0.d | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7f72:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7h12_firmware:*:*:*:*:*:*:*:* | before romepi_1.0.0.d | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7h12:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7763_firmware:*:*:*:*:*:*:*:* | before milanpi_1.0.0.7 | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7763:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7713p_firmware:*:*:*:*:*:*:*:* | before milanpi_1.0.0.7 | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7713p:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7713_firmware:*:*:*:*:*:*:*:* | before milanpi_1.0.0.7 | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7713:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7663p_firmware:*:*:*:*:*:*:*:* | before milanpi_1.0.0.7 | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7663p:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7663_firmware:*:*:*:*:*:*:*:* | before milanpi_1.0.0.7 | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7663:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7643p_firmware:*:*:*:*:*:*:*:* | before milanpi_1.0.0.7 | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7643p:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7773x_firmware:*:*:*:*:*:*:*:* | before milanpi_1.0.0.7 | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7773x:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7643_firmware:*:*:*:*:*:*:*:* | before milanpi_1.0.0.7 | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7643:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7573x_firmware:*:*:*:*:*:*:*:* | before milanpi_1.0.0.7 | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7573x:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_75f3_firmware:*:*:*:*:*:*:*:* | before milanpi_1.0.0.7 | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_75f3:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7543p_firmware:*:*:*:*:*:*:*:* | before milanpi_1.0.0.7 | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7543p:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7543_firmware:*:*:*:*:*:*:*:* | before milanpi_1.0.0.7 | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7543:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7513_firmware:*:*:*:*:*:*:*:* | before milanpi_1.0.0.7 | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7513:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7473x_firmware:*:*:*:*:*:*:*:* | before milanpi_1.0.0.7 | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7473x:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7453_firmware:*:*:*:*:*:*:*:* | before milanpi_1.0.0.7 | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7453:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_74f3_firmware:*:*:*:*:*:*:*:* | before milanpi_1.0.0.7 | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_74f3:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7443p_firmware:*:*:*:*:*:*:*:* | before milanpi_1.0.0.7 | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7443p:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7443_firmware:*:*:*:*:*:*:*:* | before milanpi_1.0.0.7 | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7443:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7413_firmware:*:*:*:*:*:*:*:* | before milanpi_1.0.0.7 | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7413:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7373x_firmware:*:*:*:*:*:*:*:* | before milanpi_1.0.0.7 | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7373x:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_73f3_firmware:*:*:*:*:*:*:*:* | before milanpi_1.0.0.7 | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_73f3:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7343_firmware:*:*:*:*:*:*:*:* | before milanpi_1.0.0.7 | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7343:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7313p_firmware:*:*:*:*:*:*:*:* | before milanpi_1.0.0.7 | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7313p:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7313_firmware:*:*:*:*:*:*:*:* | before milanpi_1.0.0.7 | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7313:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7303p_firmware:*:*:*:*:*:*:*:* | before milanpi_1.0.0.7 | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7303p:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7303_firmware:*:*:*:*:*:*:*:* | before milanpi_1.0.0.7 | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7303:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_72f3_firmware:*:*:*:*:*:*:*:* | before milanpi_1.0.0.7 | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_72f3:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7203p_firmware:*:*:*:*:*:*:*:* | before milanpi_1.0.0.7 | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7203p:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7203_firmware:*:*:*:*:*:*:*:* | before milanpi_1.0.0.7 | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7203:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:athlon_pro_300ge_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | AMD |
| cpe:2.3:h:amd:athlon_pro_300ge:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:athlon_gold_pro_3150ge_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | AMD |
| cpe:2.3:h:amd:athlon_gold_pro_3150ge:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:athlon_gold_3150g_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | AMD |
| cpe:2.3:h:amd:athlon_gold_3150g:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:athlon_gold_pro_3150g_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | AMD |
| cpe:2.3:h:amd:athlon_gold_pro_3150g:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_threadripper_2990wx_firmware:*:*:*:*:*:*:*:* | before summitpi-sp3r2_1.1.0.6 | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_threadripper_2990wx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_threadripper_2970wx_firmware:*:*:*:*:*:*:*:* | before summitpi-sp3r2_1.1.0.6 | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_threadripper_2970wx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_threadripper_2950x_firmware:*:*:*:*:*:*:*:* | before summitpi-sp3r2_1.1.0.6 | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_threadripper_2950x:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_threadripper_2920x_firmware:*:*:*:*:*:*:*:* | before summitpi-sp3r2_1.1.0.6 | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_threadripper_2920x:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_7_3780u_firmware:*:*:*:*:*:*:*:* | before picassopi-fp5_1.0.0.e | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_7_3780u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_7_3750h_firmware:*:*:*:*:*:*:*:* | before picassopi-fp5_1.0.0.e | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_7_3750h:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_7_3700c_firmware:*:*:*:*:*:*:*:* | before picassopi-fp5_1.0.0.e | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_7_3700c:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_7_3700u_firmware:*:*:*:*:*:*:*:* | before picassopi-fp5_1.0.0.e | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_7_3700u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_5_3580u_firmware:*:*:*:*:*:*:*:* | before picassopi-fp5_1.0.0.e | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_5_3580u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_5_3550h_firmware:*:*:*:*:*:*:*:* | before picassopi-fp5_1.0.0.e | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_5_3550h:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_5_3500c_firmware:*:*:*:*:*:*:*:* | before picassopi-fp5_1.0.0.e | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_5_3500c:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_5_3500u_firmware:*:*:*:*:*:*:*:* | before picassopi-fp5_1.0.0.e | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_5_3500u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_5_3450u_firmware:*:*:*:*:*:*:*:* | before picassopi-fp5_1.0.0.e | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_5_3450u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_3_3350u_firmware:*:*:*:*:*:*:*:* | before picassopi-fp5_1.0.0.e | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_3_3350u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_3_3300u_firmware:*:*:*:*:*:*:*:* | before picassopi-fp5_1.0.0.e | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_3_3300u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_3_3250u_firmware:*:*:*:*:*:*:*:* | before picassopi-fp5_1.0.0.e | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_3_3250u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_3_3250c_firmware:*:*:*:*:*:*:*:* | before picassopi-fp5_1.0.0.e | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_3_3250c:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_3_3200u_firmware:*:*:*:*:*:*:*:* | before picassopi-fp5_1.0.0.e | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_3_3200u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:amd_3015e_firmware:*:*:*:*:*:*:*:* | before pollockpi-ft5_1.0.0.4 | Vulnerable | AMD |
| cpe:2.3:h:amd:amd_3015e:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:amd_3015ce_firmware:*:*:*:*:*:*:*:* | before pollockpi-ft5_1.0.0.4 | Vulnerable | AMD |
| cpe:2.3:h:amd:amd_3015ce:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
- cpe:2.3:o:amd:epyc_7351_firmware:*:*:*:*:*:*:*:* Versions before naplespi_1.0.0.h Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7351:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7351p_firmware:*:*:*:*:*:*:*:* Versions before naplespi_1.0.0.h Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7351p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7371_firmware:*:*:*:*:*:*:*:* Versions before naplespi_1.0.0.h Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7371:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7401_firmware:*:*:*:*:*:*:*:* Versions before naplespi_1.0.0.h Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7401:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7401p_firmware:*:*:*:*:*:*:*:* Versions before naplespi_1.0.0.h Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7401p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7451_firmware:*:*:*:*:*:*:*:* Versions before naplespi_1.0.0.h Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7451:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7501_firmware:*:*:*:*:*:*:*:* Versions before naplespi_1.0.0.h Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7501:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7551_firmware:*:*:*:*:*:*:*:* Versions before naplespi_1.0.0.h Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7551:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7551p_firmware:*:*:*:*:*:*:*:* Versions before naplespi_1.0.0.h Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7551p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7601_firmware:*:*:*:*:*:*:*:* Versions before naplespi_1.0.0.h Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7601:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7232p_firmware:*:*:*:*:*:*:*:* Versions before romepi_1.0.0.d Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7232p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7252_firmware:*:*:*:*:*:*:*:* Versions before romepi_1.0.0.d Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7252:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7262_firmware:*:*:*:*:*:*:*:* Versions before romepi_1.0.0.d Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7262:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7272_firmware:*:*:*:*:*:*:*:* Versions before romepi_1.0.0.d Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7272:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7282_firmware:*:*:*:*:*:*:*:* Versions before romepi_1.0.0.d Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7282:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7302_firmware:*:*:*:*:*:*:*:* Versions before romepi_1.0.0.d Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7302:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7302p_firmware:*:*:*:*:*:*:*:* Versions before romepi_1.0.0.d Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7302p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7352_firmware:*:*:*:*:*:*:*:* Versions before romepi_1.0.0.d Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7352:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7402_firmware:*:*:*:*:*:*:*:* Versions before romepi_1.0.0.d Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7402:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7402p_firmware:*:*:*:*:*:*:*:* Versions before romepi_1.0.0.d Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7402p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7452_firmware:*:*:*:*:*:*:*:* Versions before romepi_1.0.0.d Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7452:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7502_firmware:*:*:*:*:*:*:*:* Versions before romepi_1.0.0.d Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7502:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7502p_firmware:*:*:*:*:*:*:*:* Versions before romepi_1.0.0.d Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7502p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7532_firmware:*:*:*:*:*:*:*:* Versions before romepi_1.0.0.d Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7532:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7542_firmware:*:*:*:*:*:*:*:* Versions before romepi_1.0.0.d Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7542:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7552_firmware:*:*:*:*:*:*:*:* Versions before romepi_1.0.0.d Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7552:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7642_firmware:*:*:*:*:*:*:*:* Versions before romepi_1.0.0.d Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7642:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7662_firmware:*:*:*:*:*:*:*:* Versions before romepi_1.0.0.d Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7662:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7702_firmware:*:*:*:*:*:*:*:* Versions before romepi_1.0.0.d Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7702:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7702p_firmware:*:*:*:*:*:*:*:* Versions before romepi_1.0.0.d Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7702p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7742_firmware:*:*:*:*:*:*:*:* Versions before romepi_1.0.0.d Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7742:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7f32_firmware:*:*:*:*:*:*:*:* Versions before romepi_1.0.0.d Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7f32:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7f52_firmware:*:*:*:*:*:*:*:* Versions before romepi_1.0.0.d Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7f52:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7f72_firmware:*:*:*:*:*:*:*:* Versions before romepi_1.0.0.d Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7f72:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7h12_firmware:*:*:*:*:*:*:*:* Versions before romepi_1.0.0.d Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7h12:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7763_firmware:*:*:*:*:*:*:*:* Versions before milanpi_1.0.0.7 Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7763:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7713p_firmware:*:*:*:*:*:*:*:* Versions before milanpi_1.0.0.7 Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7713p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7713_firmware:*:*:*:*:*:*:*:* Versions before milanpi_1.0.0.7 Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7713:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7663p_firmware:*:*:*:*:*:*:*:* Versions before milanpi_1.0.0.7 Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7663p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7663_firmware:*:*:*:*:*:*:*:* Versions before milanpi_1.0.0.7 Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7663:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7643p_firmware:*:*:*:*:*:*:*:* Versions before milanpi_1.0.0.7 Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7643p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7773x_firmware:*:*:*:*:*:*:*:* Versions before milanpi_1.0.0.7 Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7773x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7643_firmware:*:*:*:*:*:*:*:* Versions before milanpi_1.0.0.7 Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7643:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7573x_firmware:*:*:*:*:*:*:*:* Versions before milanpi_1.0.0.7 Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7573x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_75f3_firmware:*:*:*:*:*:*:*:* Versions before milanpi_1.0.0.7 Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_75f3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7543p_firmware:*:*:*:*:*:*:*:* Versions before milanpi_1.0.0.7 Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7543p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7543_firmware:*:*:*:*:*:*:*:* Versions before milanpi_1.0.0.7 Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7543:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7513_firmware:*:*:*:*:*:*:*:* Versions before milanpi_1.0.0.7 Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7513:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7473x_firmware:*:*:*:*:*:*:*:* Versions before milanpi_1.0.0.7 Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7473x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7453_firmware:*:*:*:*:*:*:*:* Versions before milanpi_1.0.0.7 Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7453:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_74f3_firmware:*:*:*:*:*:*:*:* Versions before milanpi_1.0.0.7 Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_74f3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7443p_firmware:*:*:*:*:*:*:*:* Versions before milanpi_1.0.0.7 Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7443p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7443_firmware:*:*:*:*:*:*:*:* Versions before milanpi_1.0.0.7 Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7443:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7413_firmware:*:*:*:*:*:*:*:* Versions before milanpi_1.0.0.7 Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7413:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7373x_firmware:*:*:*:*:*:*:*:* Versions before milanpi_1.0.0.7 Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7373x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_73f3_firmware:*:*:*:*:*:*:*:* Versions before milanpi_1.0.0.7 Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_73f3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7343_firmware:*:*:*:*:*:*:*:* Versions before milanpi_1.0.0.7 Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7343:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7313p_firmware:*:*:*:*:*:*:*:* Versions before milanpi_1.0.0.7 Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7313p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7313_firmware:*:*:*:*:*:*:*:* Versions before milanpi_1.0.0.7 Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7313:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7303p_firmware:*:*:*:*:*:*:*:* Versions before milanpi_1.0.0.7 Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7303p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7303_firmware:*:*:*:*:*:*:*:* Versions before milanpi_1.0.0.7 Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7303:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_72f3_firmware:*:*:*:*:*:*:*:* Versions before milanpi_1.0.0.7 Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_72f3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7203p_firmware:*:*:*:*:*:*:*:* Versions before milanpi_1.0.0.7 Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7203p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7203_firmware:*:*:*:*:*:*:*:* Versions before milanpi_1.0.0.7 Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7203:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:athlon_pro_300ge_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
- cpe:2.3:h:amd:athlon_pro_300ge:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:athlon_gold_pro_3150ge_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
- cpe:2.3:h:amd:athlon_gold_pro_3150ge:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:athlon_gold_3150g_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
- cpe:2.3:h:amd:athlon_gold_3150g:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:athlon_gold_pro_3150g_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·AMD
- cpe:2.3:h:amd:athlon_gold_pro_3150g:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_threadripper_2990wx_firmware:*:*:*:*:*:*:*:* Versions before summitpi-sp3r2_1.1.0.6 Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_threadripper_2990wx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_threadripper_2970wx_firmware:*:*:*:*:*:*:*:* Versions before summitpi-sp3r2_1.1.0.6 Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_threadripper_2970wx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_threadripper_2950x_firmware:*:*:*:*:*:*:*:* Versions before summitpi-sp3r2_1.1.0.6 Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_threadripper_2950x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_threadripper_2920x_firmware:*:*:*:*:*:*:*:* Versions before summitpi-sp3r2_1.1.0.6 Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_threadripper_2920x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_7_3780u_firmware:*:*:*:*:*:*:*:* Versions before picassopi-fp5_1.0.0.e Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_7_3780u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_7_3750h_firmware:*:*:*:*:*:*:*:* Versions before picassopi-fp5_1.0.0.e Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_7_3750h:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_7_3700c_firmware:*:*:*:*:*:*:*:* Versions before picassopi-fp5_1.0.0.e Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_7_3700c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_7_3700u_firmware:*:*:*:*:*:*:*:* Versions before picassopi-fp5_1.0.0.e Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_7_3700u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_5_3580u_firmware:*:*:*:*:*:*:*:* Versions before picassopi-fp5_1.0.0.e Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_5_3580u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_5_3550h_firmware:*:*:*:*:*:*:*:* Versions before picassopi-fp5_1.0.0.e Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_5_3550h:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_5_3500c_firmware:*:*:*:*:*:*:*:* Versions before picassopi-fp5_1.0.0.e Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_5_3500c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_5_3500u_firmware:*:*:*:*:*:*:*:* Versions before picassopi-fp5_1.0.0.e Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_5_3500u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_5_3450u_firmware:*:*:*:*:*:*:*:* Versions before picassopi-fp5_1.0.0.e Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_5_3450u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_3_3350u_firmware:*:*:*:*:*:*:*:* Versions before picassopi-fp5_1.0.0.e Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_3_3350u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_3_3300u_firmware:*:*:*:*:*:*:*:* Versions before picassopi-fp5_1.0.0.e Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_3_3300u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_3_3250u_firmware:*:*:*:*:*:*:*:* Versions before picassopi-fp5_1.0.0.e Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_3_3250u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_3_3250c_firmware:*:*:*:*:*:*:*:* Versions before picassopi-fp5_1.0.0.e Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_3_3250c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_3_3200u_firmware:*:*:*:*:*:*:*:* Versions before picassopi-fp5_1.0.0.e Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_3_3200u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:amd_3015e_firmware:*:*:*:*:*:*:*:* Versions before pollockpi-ft5_1.0.0.4 Vulnerable ·AMD
- cpe:2.3:h:amd:amd_3015e:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:amd_3015ce_firmware:*:*:*:*:*:*:*:* Versions before pollockpi-ft5_1.0.0.4 Vulnerable ·AMD
- cpe:2.3:h:amd:amd_3015ce:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
Remediation
No fixed version listed by the sources yet.
Fixed in the same release
Records fixed by the same vendor advisory or release, as the CNA lists them.
- Advisory ·
AMD 1st Gen AMD EPYC™ Processors, 2nd Gen AMD EPYC™ Processors and 4 more products — amd.com/en/corporate/product-security/bulletin/AMD-SB-3002
9 records Highest priority Priority MEDIUM 1 MEDIUM, 8 LOW
Other records, highest priority first
- TI-2022-07838 Improper input validation in AMD Ryzen™ 3000 series Desktop Processors “Matisse"Priority MEDIUM 43
- TI-2023-07018 Improper address validation in ASP with SNP enabled may potentially allow an attacker to…Priority LOW 33
- TI-2023-07005 Insufficient DRAM address validation in System Management Unit (SMU) may allow an…Priority LOW 33
- Advisory ·
AMD 1st Gen AMD EPYC™ Processors, 2nd Gen AMD EPYC™ Processors and 9 more products — amd.com/en/corporate/product-security/bulletin/AMD-SB-4002
6 records Highest priority Priority MEDIUM 2 MEDIUM, 4 LOW
Other records, highest priority first
- TI-2022-07839 Improper access control in System Management Mode (SMM) may allow an attacker to write to…Priority MEDIUM 51
- TI-2022-07838 Improper input validation in AMD Ryzen™ 3000 series Desktop Processors “Matisse"Priority MEDIUM 43
- TI-2023-07005 Insufficient DRAM address validation in System Management Unit (SMU) may allow an…Priority LOW 33
Timeline
- 2026-10-02 Threatist record created from CVE-2023-20521
- 2026-10-03 Alias added: GHSA-7r55-mp9r-c8pj
References
More Amd 3015ce Firmware vulnerabilities
- TI-2021-08189 Out-of-bounds read in AMD Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4 CVSS 3.1HIGH 8.2
- TI-2021-08213 Out-of-bounds write in AMD Radeon RX 5000 Series & PRO W5000 Series CVSS 3.1HIGH 7.8
- TI-2020-10274 Improper parameters handling in the AMD Secure Processor (ASP) kernel may allow a… CVSS 3.1HIGH 7.8
- TI-2020-10273 Improper parameters handling in AMD Secure Processor (ASP) drivers may allow a privileged… CVSS 3.1HIGH 7.8
- TI-2021-08214 Memory leak in AMD Radeon RX 5000 Series & PRO W5000 Series CVSS 3.1MEDIUM 5.5
- TI-2021-08195 A compromised or malicious ABL or UApp could send a SHA256 system call to the bootloader… CVSS 3.1MEDIUM 5.5
Sources
- CVE-2023-20521 · CVE Program
- CVE-2023-20521 · NVD
- FIRST EPSS
- GHSA-7r55-mp9r-c8pj · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences