Time-of-check time-of-use race condition in AMD EPYC™ 7001 Processors
Priority LOW 34CWE-367Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- High
- User interaction
- None
- Attack complexity
- High
- Impact type
- —
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA.
Summary
A TOCTOU (Time-Of-Check-Time-Of-Use) in SMM may allow an attacker with ring0 privileges and access to the BIOS menu or UEFI shell to modify the communications buffer potentially resulting in arbitrary code execution.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00116 1st percentileScored 2026-11-07
Fix Fixed AMD EPYC™ 7001 Processors (AMD): NaplesPI 1.0.0.KAMD EPYC™ 7002 Processors (AMD): RomePI 1.0.0.G+13 more products
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| AMD | AMD EPYC™ 7001 Processors | — | NaplesPI 1.0.0.K | Patch available | CNA |
| AMD | AMD EPYC™ 7002 Processors | — | RomePI 1.0.0.G | Patch available | CNA |
| AMD | AMD EPYC™ 7003 Processors | — | MilanPI 1.0.0.B | Patch available | CNA |
| AMD | AMD EPYC™ 9004 Processors | — | GenoaPI 1.0.0.2 | Patch available | CNA |
| AMD | AMD Ryzen™ 7000 Series Desktop Processors | — | ComboAM5 1.0.0.1 | Patch available | CNA |
| AMD | AMD Ryzen™ Threadripper™ PRO 5000WX Processors | — | ChagallWSPI-sWRX8 1.0.0.7 | Patch available | CNA |
| AMD | AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics | — | MendocinoPI-FT6 1.0.0.0 | Patch available | CNA |
| AMD | AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics | — | RembrandtPI-FP7 1.0.0.9b | Patch available | CNA |
| AMD | AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics | — | RembrandtPI-FP7 1.0.0.9b | Patch available | CNA |
| AMD | AMD EPYC™ Embedded 3000 | — | SnowyOwl PI 1.1.0.A | Patch available | CNA |
| AMD | AMD EPYC™ Embedded 7002 | — | EmbRomePI-SP3 1.0.0.A | Patch available | CNA |
| AMD | AMD EPYC™ Embedded 7003 | — | EmbMilanPI-SP3 1.0.0.7 | Patch available | CNA |
| AMD | AMD EPYC™ Embedded 9003 | — | EmbGenoaPI-SP5 1.0.0.0 | Patch available | CNA |
| AMD | AMD Ryzen™ Embedded 7000 | — | EmbeddedAM5PI 1.0.0.0 | Patch available | CNA |
| AMD | AMD RyzenTM Embedded V3000 | — | EmbeddedPI-FP7r2 1.0.0.8 | Patch available | CNA |
- AMD EPYC™ 7001 Processors VendorAMD Affected — Fixed in NaplesPI 1.0.0.K Patch available CNA
- AMD EPYC™ 7002 Processors VendorAMD Affected — Fixed in RomePI 1.0.0.G Patch available CNA
- AMD EPYC™ 7003 Processors VendorAMD Affected — Fixed in MilanPI 1.0.0.B Patch available CNA
- AMD EPYC™ 9004 Processors VendorAMD Affected — Fixed in GenoaPI 1.0.0.2 Patch available CNA
- AMD Ryzen™ 7000 Series Desktop Processors VendorAMD Affected — Fixed in ComboAM5 1.0.0.1 Patch available CNA
- AMD Ryzen™ Threadripper™ PRO 5000WX Processors VendorAMD Affected — Fixed in ChagallWSPI-sWRX8 1.0.0.7 Patch available CNA
- AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics VendorAMD Affected — Fixed in MendocinoPI-FT6 1.0.0.0 Patch available CNA
- AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics VendorAMD Affected — Fixed in RembrandtPI-FP7 1.0.0.9b Patch available CNA
- AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics VendorAMD Affected — Fixed in RembrandtPI-FP7 1.0.0.9b Patch available CNA
- AMD EPYC™ Embedded 3000 VendorAMD Affected — Fixed in SnowyOwl PI 1.1.0.A Patch available CNA
- AMD EPYC™ Embedded 7002 VendorAMD Affected — Fixed in EmbRomePI-SP3 1.0.0.A Patch available CNA
- AMD EPYC™ Embedded 7003 VendorAMD Affected — Fixed in EmbMilanPI-SP3 1.0.0.7 Patch available CNA
- AMD EPYC™ Embedded 9003 VendorAMD Affected — Fixed in EmbGenoaPI-SP5 1.0.0.0 Patch available CNA
- AMD Ryzen™ Embedded 7000 VendorAMD Affected — Fixed in EmbeddedAM5PI 1.0.0.0 Patch available CNA
- AMD RyzenTM Embedded V3000 VendorAMD Affected — Fixed in EmbeddedPI-FP7r2 1.0.0.8 Patch available CNA
CPE configurations NVD · 210
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:amd:epyc_8024pn_firmware:*:*:*:*:*:*:*:* | before genoapi_1.0.0.2 | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_8024pn:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_8024p_firmware:*:*:*:*:*:*:*:* | before genoapi_1.0.0.2 | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_8024p:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_8124pn_firmware:*:*:*:*:*:*:*:* | before genoapi_1.0.0.2 | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_8124pn:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_8124p_firmware:*:*:*:*:*:*:*:* | before genoapi_1.0.0.2 | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_8124p:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_8224pn_firmware:*:*:*:*:*:*:*:* | before genoapi_1.0.0.2 | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_8224pn:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
- cpe:2.3:o:amd:epyc_8024pn_firmware:*:*:*:*:*:*:*:* Versions before genoapi_1.0.0.2 Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_8024pn:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_8024p_firmware:*:*:*:*:*:*:*:* Versions before genoapi_1.0.0.2 Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_8024p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_8124pn_firmware:*:*:*:*:*:*:*:* Versions before genoapi_1.0.0.2 Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_8124pn:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_8124p_firmware:*:*:*:*:*:*:*:* Versions before genoapi_1.0.0.2 Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_8124p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_8224pn_firmware:*:*:*:*:*:*:*:* Versions before genoapi_1.0.0.2 Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_8224pn:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
Show 200 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:amd:epyc_8224p_firmware:*:*:*:*:*:*:*:* | before genoapi_1.0.0.2 | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_8224p:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_8324pn_firmware:*:*:*:*:*:*:*:* | before genoapi_1.0.0.2 | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_8324pn:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_8324p_firmware:*:*:*:*:*:*:*:* | before genoapi_1.0.0.2 | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_8324p:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_8434pn_firmware:*:*:*:*:*:*:*:* | before genoapi_1.0.0.2 | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_8434pn:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_8434p_firmware:*:*:*:*:*:*:*:* | before genoapi_1.0.0.2 | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_8434p:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_8534pn_firmware:*:*:*:*:*:*:*:* | before genoapi_1.0.0.2 | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_8534pn:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_8534p_firmware:*:*:*:*:*:*:*:* | before genoapi_1.0.0.2 | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_8534p:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_9734_firmware:*:*:*:*:*:*:*:* | before genoapi_1.0.0.2 | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_9734:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_9754s_firmware:*:*:*:*:*:*:*:* | before genoapi_1.0.0.2 | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_9754s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_9754_firmware:*:*:*:*:*:*:*:* | before genoapi_1.0.0.2 | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_9754:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_9184x_firmware:*:*:*:*:*:*:*:* | before genoapi_1.0.0.2 | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_9184x:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_9384x_firmware:*:*:*:*:*:*:*:* | before genoapi_1.0.0.2 | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_9384x:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_9684x_firmware:*:*:*:*:*:*:*:* | before genoapi_1.0.0.2 | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_9684x:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_9124_firmware:*:*:*:*:*:*:*:* | before genoapi_1.0.0.2 | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_9124:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_9174f_firmware:*:*:*:*:*:*:*:* | before genoapi_1.0.0.2 | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_9174f:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_9224_firmware:*:*:*:*:*:*:*:* | before genoapi_1.0.0.2 | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_9224:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_9254_firmware:*:*:*:*:*:*:*:* | before genoapi_1.0.0.2 | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_9254:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_9274f_firmware:*:*:*:*:*:*:*:* | before genoapi_1.0.0.2 | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_9274f:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_9334_firmware:*:*:*:*:*:*:*:* | before genoapi_1.0.0.2 | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_9334:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_9354_firmware:*:*:*:*:*:*:*:* | before genoapi_1.0.0.2 | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_9354:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_9354p_firmware:*:*:*:*:*:*:*:* | before genoapi_1.0.0.2 | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_9354p:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_9374f_firmware:*:*:*:*:*:*:*:* | before genoapi_1.0.0.2 | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_9374f:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_9454_firmware:*:*:*:*:*:*:*:* | before genoapi_1.0.0.2 | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_9454:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_9454p_firmware:*:*:*:*:*:*:*:* | before genoapi_1.0.0.2 | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_9454p:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_9474f_firmware:*:*:*:*:*:*:*:* | before genoapi_1.0.0.2 | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_9474f:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_9534_firmware:*:*:*:*:*:*:*:* | before genoapi_1.0.0.2 | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_9534:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_9554_firmware:*:*:*:*:*:*:*:* | before genoapi_1.0.0.2 | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_9554:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_9554p_firmware:*:*:*:*:*:*:*:* | before genoapi_1.0.0.2 | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_9554p:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_9634_firmware:*:*:*:*:*:*:*:* | before genoapi_1.0.0.2 | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_9634:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_9654_firmware:*:*:*:*:*:*:*:* | before genoapi_1.0.0.2 | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_9654:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_9654p_firmware:*:*:*:*:*:*:*:* | before genoapi_1.0.0.2 | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_9654p:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7203_firmware:*:*:*:*:*:*:*:* | before milanpi_1.0.0.5 | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7203:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7203p_firmware:*:*:*:*:*:*:*:* | before milanpi_1.0.0.5 | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7203p:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_72f3_firmware:*:*:*:*:*:*:*:* | before milanpi_1.0.0.5 | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_72f3:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7303_firmware:*:*:*:*:*:*:*:* | before milanpi_1.0.0.5 | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7303:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7303p_firmware:*:*:*:*:*:*:*:* | before milanpi_1.0.0.5 | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7303p:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7313_firmware:*:*:*:*:*:*:*:* | before milanpi_1.0.0.5 | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7313:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7313p_firmware:*:*:*:*:*:*:*:* | before milanpi_1.0.0.5 | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7313p:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7343_firmware:*:*:*:*:*:*:*:* | before milanpi_1.0.0.5 | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7343:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_73f3_firmware:*:*:*:*:*:*:*:* | before milanpi_1.0.0.5 | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_73f3:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7373x_firmware:*:*:*:*:*:*:*:* | before milanpi_1.0.0.5 | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7373x:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7413_firmware:*:*:*:*:*:*:*:* | before milanpi_1.0.0.5 | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7413:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7443_firmware:*:*:*:*:*:*:*:* | before milanpi_1.0.0.5 | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7443:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7443p_firmware:*:*:*:*:*:*:*:* | before milanpi_1.0.0.5 | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7443p:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_74f3_firmware:*:*:*:*:*:*:*:* | before milanpi_1.0.0.5 | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_74f3:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7453_firmware:*:*:*:*:*:*:*:* | before milanpi_1.0.0.5 | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7453:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7473x_firmware:*:*:*:*:*:*:*:* | before milanpi_1.0.0.5 | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7473x:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7513_firmware:*:*:*:*:*:*:*:* | before milanpi_1.0.0.5 | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7513:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7543_firmware:*:*:*:*:*:*:*:* | before milanpi_1.0.0.5 | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7543:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7543p_firmware:*:*:*:*:*:*:*:* | before milanpi_1.0.0.5 | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7543p:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_75f3_firmware:*:*:*:*:*:*:*:* | before milanpi_1.0.0.5 | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_75f3:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7573x_firmware:*:*:*:*:*:*:*:* | before milanpi_1.0.0.5 | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7573x:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7643_firmware:*:*:*:*:*:*:*:* | before milanpi_1.0.0.5 | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7643:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7773x_firmware:*:*:*:*:*:*:*:* | before milanpi_1.0.0.5 | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7773x:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7643p_firmware:*:*:*:*:*:*:*:* | before milanpi_1.0.0.5 | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7643p:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7663_firmware:*:*:*:*:*:*:*:* | before milanpi_1.0.0.5 | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7663:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7663p_firmware:*:*:*:*:*:*:*:* | before milanpi_1.0.0.5 | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7663p:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7713_firmware:*:*:*:*:*:*:*:* | before milanpi_1.0.0.5 | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7713:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7713p_firmware:*:*:*:*:*:*:*:* | before milanpi_1.0.0.5 | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7713p:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7763_firmware:*:*:*:*:*:*:*:* | before milanpi_1.0.0.5 | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7763:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7h12_firmware:*:*:*:*:*:*:*:* | before romepi_1.0.0.g | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7h12:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7f72_firmware:*:*:*:*:*:*:*:* | before romepi_1.0.0.g | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7f72:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7f52_firmware:*:*:*:*:*:*:*:* | before romepi_1.0.0.g | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7f52:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7f32_firmware:*:*:*:*:*:*:*:* | before romepi_1.0.0.g | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7f32:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7742_firmware:*:*:*:*:*:*:*:* | before romepi_1.0.0.g | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7742:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7702p_firmware:*:*:*:*:*:*:*:* | before romepi_1.0.0.g | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7702p:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7702_firmware:*:*:*:*:*:*:*:* | before romepi_1.0.0.g | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7702:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7662_firmware:*:*:*:*:*:*:*:* | before romepi_1.0.0.g | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7662:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7642_firmware:*:*:*:*:*:*:*:* | before romepi_1.0.0.g | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7642:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7552_firmware:*:*:*:*:*:*:*:* | before romepi_1.0.0.g | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7552:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7542_firmware:*:*:*:*:*:*:*:* | before romepi_1.0.0.g | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7542:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7532_firmware:*:*:*:*:*:*:*:* | before romepi_1.0.0.g | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7532:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7502p_firmware:*:*:*:*:*:*:*:* | before romepi_1.0.0.g | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7502p:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7502_firmware:*:*:*:*:*:*:*:* | before romepi_1.0.0.g | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7502:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7452_firmware:*:*:*:*:*:*:*:* | before romepi_1.0.0.g | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7452:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7402p_firmware:*:*:*:*:*:*:*:* | before romepi_1.0.0.g | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7402p:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7402_firmware:*:*:*:*:*:*:*:* | before romepi_1.0.0.g | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7402:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7352_firmware:*:*:*:*:*:*:*:* | before romepi_1.0.0.g | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7352:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7302p_firmware:*:*:*:*:*:*:*:* | before romepi_1.0.0.g | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7302p:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7302_firmware:*:*:*:*:*:*:*:* | before romepi_1.0.0.g | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7302:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7282_firmware:*:*:*:*:*:*:*:* | before romepi_1.0.0.g | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7282:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7272_firmware:*:*:*:*:*:*:*:* | before romepi_1.0.0.g | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7272:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7262_firmware:*:*:*:*:*:*:*:* | before romepi_1.0.0.g | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7262:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7252_firmware:*:*:*:*:*:*:*:* | before romepi_1.0.0.g | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7252:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7232p_firmware:*:*:*:*:*:*:*:* | before romepi_1.0.0.g | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7232p:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7601_firmware:*:*:*:*:*:*:*:* | before naplespi_1.0.0.k | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7601:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7551p_firmware:*:*:*:*:*:*:*:* | before naplespi_1.0.0.k | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7551p:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7551_firmware:*:*:*:*:*:*:*:* | before naplespi_1.0.0.k | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7551:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7501_firmware:*:*:*:*:*:*:*:* | before naplespi_1.0.0.k | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7501:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7451_firmware:*:*:*:*:*:*:*:* | before naplespi_1.0.0.k | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7451:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7401p_firmware:*:*:*:*:*:*:*:* | before naplespi_1.0.0.k | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7401p:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7401_firmware:*:*:*:*:*:*:*:* | before naplespi_1.0.0.k | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7401:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7371_firmware:*:*:*:*:*:*:*:* | before naplespi_1.0.0.k | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7371:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7351p_firmware:*:*:*:*:*:*:*:* | before naplespi_1.0.0.k | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7351p:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7351_firmware:*:*:*:*:*:*:*:* | before naplespi_1.0.0.k | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7351:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7301_firmware:*:*:*:*:*:*:*:* | before naplespi_1.0.0.k | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7301:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7281_firmware:*:*:*:*:*:*:*:* | before naplespi_1.0.0.k | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7281:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7261_firmware:*:*:*:*:*:*:*:* | before naplespi_1.0.0.k | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7261:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7251_firmware:*:*:*:*:*:*:*:* | before naplespi_1.0.0.k | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7251:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:epyc_7001_firmware:*:*:*:*:*:*:*:* | before naplespi_1.0.0.k | Vulnerable | AMD |
| cpe:2.3:h:amd:epyc_7001:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
- cpe:2.3:o:amd:epyc_8224p_firmware:*:*:*:*:*:*:*:* Versions before genoapi_1.0.0.2 Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_8224p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_8324pn_firmware:*:*:*:*:*:*:*:* Versions before genoapi_1.0.0.2 Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_8324pn:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_8324p_firmware:*:*:*:*:*:*:*:* Versions before genoapi_1.0.0.2 Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_8324p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_8434pn_firmware:*:*:*:*:*:*:*:* Versions before genoapi_1.0.0.2 Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_8434pn:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_8434p_firmware:*:*:*:*:*:*:*:* Versions before genoapi_1.0.0.2 Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_8434p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_8534pn_firmware:*:*:*:*:*:*:*:* Versions before genoapi_1.0.0.2 Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_8534pn:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_8534p_firmware:*:*:*:*:*:*:*:* Versions before genoapi_1.0.0.2 Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_8534p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_9734_firmware:*:*:*:*:*:*:*:* Versions before genoapi_1.0.0.2 Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_9734:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_9754s_firmware:*:*:*:*:*:*:*:* Versions before genoapi_1.0.0.2 Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_9754s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_9754_firmware:*:*:*:*:*:*:*:* Versions before genoapi_1.0.0.2 Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_9754:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_9184x_firmware:*:*:*:*:*:*:*:* Versions before genoapi_1.0.0.2 Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_9184x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_9384x_firmware:*:*:*:*:*:*:*:* Versions before genoapi_1.0.0.2 Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_9384x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_9684x_firmware:*:*:*:*:*:*:*:* Versions before genoapi_1.0.0.2 Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_9684x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_9124_firmware:*:*:*:*:*:*:*:* Versions before genoapi_1.0.0.2 Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_9124:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_9174f_firmware:*:*:*:*:*:*:*:* Versions before genoapi_1.0.0.2 Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_9174f:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_9224_firmware:*:*:*:*:*:*:*:* Versions before genoapi_1.0.0.2 Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_9224:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_9254_firmware:*:*:*:*:*:*:*:* Versions before genoapi_1.0.0.2 Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_9254:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_9274f_firmware:*:*:*:*:*:*:*:* Versions before genoapi_1.0.0.2 Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_9274f:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_9334_firmware:*:*:*:*:*:*:*:* Versions before genoapi_1.0.0.2 Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_9334:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_9354_firmware:*:*:*:*:*:*:*:* Versions before genoapi_1.0.0.2 Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_9354:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_9354p_firmware:*:*:*:*:*:*:*:* Versions before genoapi_1.0.0.2 Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_9354p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_9374f_firmware:*:*:*:*:*:*:*:* Versions before genoapi_1.0.0.2 Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_9374f:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_9454_firmware:*:*:*:*:*:*:*:* Versions before genoapi_1.0.0.2 Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_9454:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_9454p_firmware:*:*:*:*:*:*:*:* Versions before genoapi_1.0.0.2 Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_9454p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_9474f_firmware:*:*:*:*:*:*:*:* Versions before genoapi_1.0.0.2 Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_9474f:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_9534_firmware:*:*:*:*:*:*:*:* Versions before genoapi_1.0.0.2 Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_9534:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_9554_firmware:*:*:*:*:*:*:*:* Versions before genoapi_1.0.0.2 Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_9554:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_9554p_firmware:*:*:*:*:*:*:*:* Versions before genoapi_1.0.0.2 Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_9554p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_9634_firmware:*:*:*:*:*:*:*:* Versions before genoapi_1.0.0.2 Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_9634:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_9654_firmware:*:*:*:*:*:*:*:* Versions before genoapi_1.0.0.2 Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_9654:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_9654p_firmware:*:*:*:*:*:*:*:* Versions before genoapi_1.0.0.2 Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_9654p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7203_firmware:*:*:*:*:*:*:*:* Versions before milanpi_1.0.0.5 Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7203:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7203p_firmware:*:*:*:*:*:*:*:* Versions before milanpi_1.0.0.5 Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7203p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_72f3_firmware:*:*:*:*:*:*:*:* Versions before milanpi_1.0.0.5 Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_72f3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7303_firmware:*:*:*:*:*:*:*:* Versions before milanpi_1.0.0.5 Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7303:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7303p_firmware:*:*:*:*:*:*:*:* Versions before milanpi_1.0.0.5 Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7303p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7313_firmware:*:*:*:*:*:*:*:* Versions before milanpi_1.0.0.5 Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7313:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7313p_firmware:*:*:*:*:*:*:*:* Versions before milanpi_1.0.0.5 Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7313p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7343_firmware:*:*:*:*:*:*:*:* Versions before milanpi_1.0.0.5 Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7343:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_73f3_firmware:*:*:*:*:*:*:*:* Versions before milanpi_1.0.0.5 Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_73f3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7373x_firmware:*:*:*:*:*:*:*:* Versions before milanpi_1.0.0.5 Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7373x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7413_firmware:*:*:*:*:*:*:*:* Versions before milanpi_1.0.0.5 Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7413:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7443_firmware:*:*:*:*:*:*:*:* Versions before milanpi_1.0.0.5 Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7443:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7443p_firmware:*:*:*:*:*:*:*:* Versions before milanpi_1.0.0.5 Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7443p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_74f3_firmware:*:*:*:*:*:*:*:* Versions before milanpi_1.0.0.5 Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_74f3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7453_firmware:*:*:*:*:*:*:*:* Versions before milanpi_1.0.0.5 Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7453:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7473x_firmware:*:*:*:*:*:*:*:* Versions before milanpi_1.0.0.5 Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7473x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7513_firmware:*:*:*:*:*:*:*:* Versions before milanpi_1.0.0.5 Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7513:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7543_firmware:*:*:*:*:*:*:*:* Versions before milanpi_1.0.0.5 Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7543:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7543p_firmware:*:*:*:*:*:*:*:* Versions before milanpi_1.0.0.5 Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7543p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_75f3_firmware:*:*:*:*:*:*:*:* Versions before milanpi_1.0.0.5 Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_75f3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7573x_firmware:*:*:*:*:*:*:*:* Versions before milanpi_1.0.0.5 Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7573x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7643_firmware:*:*:*:*:*:*:*:* Versions before milanpi_1.0.0.5 Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7643:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7773x_firmware:*:*:*:*:*:*:*:* Versions before milanpi_1.0.0.5 Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7773x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7643p_firmware:*:*:*:*:*:*:*:* Versions before milanpi_1.0.0.5 Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7643p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7663_firmware:*:*:*:*:*:*:*:* Versions before milanpi_1.0.0.5 Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7663:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7663p_firmware:*:*:*:*:*:*:*:* Versions before milanpi_1.0.0.5 Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7663p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7713_firmware:*:*:*:*:*:*:*:* Versions before milanpi_1.0.0.5 Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7713:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7713p_firmware:*:*:*:*:*:*:*:* Versions before milanpi_1.0.0.5 Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7713p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7763_firmware:*:*:*:*:*:*:*:* Versions before milanpi_1.0.0.5 Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7763:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7h12_firmware:*:*:*:*:*:*:*:* Versions before romepi_1.0.0.g Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7h12:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7f72_firmware:*:*:*:*:*:*:*:* Versions before romepi_1.0.0.g Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7f72:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7f52_firmware:*:*:*:*:*:*:*:* Versions before romepi_1.0.0.g Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7f52:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7f32_firmware:*:*:*:*:*:*:*:* Versions before romepi_1.0.0.g Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7f32:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7742_firmware:*:*:*:*:*:*:*:* Versions before romepi_1.0.0.g Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7742:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7702p_firmware:*:*:*:*:*:*:*:* Versions before romepi_1.0.0.g Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7702p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7702_firmware:*:*:*:*:*:*:*:* Versions before romepi_1.0.0.g Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7702:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7662_firmware:*:*:*:*:*:*:*:* Versions before romepi_1.0.0.g Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7662:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7642_firmware:*:*:*:*:*:*:*:* Versions before romepi_1.0.0.g Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7642:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7552_firmware:*:*:*:*:*:*:*:* Versions before romepi_1.0.0.g Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7552:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7542_firmware:*:*:*:*:*:*:*:* Versions before romepi_1.0.0.g Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7542:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7532_firmware:*:*:*:*:*:*:*:* Versions before romepi_1.0.0.g Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7532:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7502p_firmware:*:*:*:*:*:*:*:* Versions before romepi_1.0.0.g Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7502p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7502_firmware:*:*:*:*:*:*:*:* Versions before romepi_1.0.0.g Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7502:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7452_firmware:*:*:*:*:*:*:*:* Versions before romepi_1.0.0.g Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7452:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7402p_firmware:*:*:*:*:*:*:*:* Versions before romepi_1.0.0.g Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7402p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7402_firmware:*:*:*:*:*:*:*:* Versions before romepi_1.0.0.g Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7402:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7352_firmware:*:*:*:*:*:*:*:* Versions before romepi_1.0.0.g Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7352:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7302p_firmware:*:*:*:*:*:*:*:* Versions before romepi_1.0.0.g Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7302p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7302_firmware:*:*:*:*:*:*:*:* Versions before romepi_1.0.0.g Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7302:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7282_firmware:*:*:*:*:*:*:*:* Versions before romepi_1.0.0.g Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7282:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7272_firmware:*:*:*:*:*:*:*:* Versions before romepi_1.0.0.g Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7272:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7262_firmware:*:*:*:*:*:*:*:* Versions before romepi_1.0.0.g Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7262:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7252_firmware:*:*:*:*:*:*:*:* Versions before romepi_1.0.0.g Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7252:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7232p_firmware:*:*:*:*:*:*:*:* Versions before romepi_1.0.0.g Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7232p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7601_firmware:*:*:*:*:*:*:*:* Versions before naplespi_1.0.0.k Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7601:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7551p_firmware:*:*:*:*:*:*:*:* Versions before naplespi_1.0.0.k Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7551p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7551_firmware:*:*:*:*:*:*:*:* Versions before naplespi_1.0.0.k Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7551:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7501_firmware:*:*:*:*:*:*:*:* Versions before naplespi_1.0.0.k Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7501:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7451_firmware:*:*:*:*:*:*:*:* Versions before naplespi_1.0.0.k Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7451:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7401p_firmware:*:*:*:*:*:*:*:* Versions before naplespi_1.0.0.k Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7401p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7401_firmware:*:*:*:*:*:*:*:* Versions before naplespi_1.0.0.k Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7401:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7371_firmware:*:*:*:*:*:*:*:* Versions before naplespi_1.0.0.k Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7371:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7351p_firmware:*:*:*:*:*:*:*:* Versions before naplespi_1.0.0.k Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7351p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7351_firmware:*:*:*:*:*:*:*:* Versions before naplespi_1.0.0.k Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7351:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7301_firmware:*:*:*:*:*:*:*:* Versions before naplespi_1.0.0.k Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7301:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7281_firmware:*:*:*:*:*:*:*:* Versions before naplespi_1.0.0.k Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7281:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7261_firmware:*:*:*:*:*:*:*:* Versions before naplespi_1.0.0.k Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7261:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7251_firmware:*:*:*:*:*:*:*:* Versions before naplespi_1.0.0.k Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7251:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:epyc_7001_firmware:*:*:*:*:*:*:*:* Versions before naplespi_1.0.0.k Vulnerable ·AMD
- cpe:2.3:h:amd:epyc_7001:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
Remediation
- Fix · CNA AMD EPYC™ 7001 Processors (AMD) Fixed in NaplesPI 1.0.0.K
- Fix · CNA AMD EPYC™ 7002 Processors (AMD) Fixed in RomePI 1.0.0.G
- Fix · CNA AMD EPYC™ 7003 Processors (AMD) Fixed in MilanPI 1.0.0.B
- Fix · CNA AMD EPYC™ 9004 Processors (AMD) Fixed in GenoaPI 1.0.0.2
- Fix · CNA AMD Ryzen™ 7000 Series Desktop Processors (AMD) Fixed in ComboAM5 1.0.0.1
- Fix · CNA AMD Ryzen™ Threadripper™ PRO 5000WX Processors (AMD) Fixed in ChagallWSPI-sWRX8 1.0.0.7
- Fix · CNA AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics (AMD) Fixed in MendocinoPI-FT6 1.0.0.0
- Fix · CNA AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics (AMD) Fixed in RembrandtPI-FP7 1.0.0.9b
- Fix · CNA AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics (AMD) Fixed in RembrandtPI-FP7 1.0.0.9b
- Fix · CNA AMD EPYC™ Embedded 3000 (AMD) Fixed in SnowyOwl PI 1.1.0.A
- Fix · CNA AMD EPYC™ Embedded 7002 (AMD) Fixed in EmbRomePI-SP3 1.0.0.A
- Fix · CNA AMD EPYC™ Embedded 7003 (AMD) Fixed in EmbMilanPI-SP3 1.0.0.7
- Fix · CNA AMD EPYC™ Embedded 9003 (AMD) Fixed in EmbGenoaPI-SP5 1.0.0.0
- Fix · CNA AMD Ryzen™ Embedded 7000 (AMD) Fixed in EmbeddedAM5PI 1.0.0.0
- Fix · CNA AMD RyzenTM Embedded V3000 (AMD) Fixed in EmbeddedPI-FP7r2 1.0.0.8
Fixed in the same release
Records fixed by the same vendor advisory or release, as the CNA lists them.
- Advisory ·
AMD EPYC™ 7001 Processors, AMD EPYC™ 7002 Processors and 8 more products — amd.com/en/resources/product-security/bulletin/amd-sb-3003.…
9 records Highest priority Priority LOW 9 LOW
Other records, highest priority first
- TI-2021-08171 Out-of-bounds write in AMD EPYC™ 7001 Series ProcessorsPriority LOW 37
- TI-2024-14613 Authorization bypass in AMD EPYC™ 7001 Series ProcessorsPriority LOW 27
- TI-2023-07034 IOMMU improperly handles certain special address ranges with invalid device table entries…Priority LOW 26
Timeline
- 2026-10-02 Threatist record created from CVE-2023-20578
- 2026-10-03 Alias added: GHSA-3phx-v48r-rmwc
References
More AMD Epyc 7001 Firmware vulnerabilities
- TI-2021-08171 Out-of-bounds write in AMD EPYC™ 7001 Series Processors CVSS 3.1HIGH 8.2
- TI-2022-12252 Mis-trained branch predictions for return instructions may allow arbitrary speculative… CVSS 3.1MEDIUM 6.5
- TI-2021-08167 A malicious hypervisor in conjunction with an unprivileged attacker process inside an… CVSS 3.1HIGH 8.4
- TI-2021-08217 Out-of-bounds write in AMD 1st Gen EPYC CVSS 3.1HIGH 7.8
- TI-2021-08183 Time-of-check time-of-use race condition in AMD Ryzen™ 3000 Series Desktop Processors… CVSS 3.1HIGH 7.4
- TI-2020-10295 A potential denial of service (DoS) vulnerability exists in the integrated chipset that… CVSS 3.1HIGH 7.5
Sources
- CVE-2023-20578 · CVE Program
- CVE-2023-20578 · NVD
- FIRST EPSS
- GHSA-3phx-v48r-rmwc · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences