Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

14 records

Release: AMD 3rd Gen AMD EPYC™ MilanPI-SP3_1.0.0.4 Clear all filters
TI-2021-08152 CVE-2021-26325 · GHSA-v4mm-mqqh-4wf8

Improper input validation in AMD 3rd Gen AMD EPYC™

Priority LOW 24

Insufficient input validation in the SNP_GUEST_REQUEST command may lead to a potential data abort error and a denial of service.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00219 Published 2021-11-16 Fixed in MilanPI-SP3_1.0.0.4 CWE-20
TI-2020-10281 CVE-2020-12961 · GHSA-2p3h-m9wr-j5v9

Improper input validation in AMD 2nd Gen AMD EPYC™

Priority LOW 34

A potential vulnerability exists in AMD Platform Security Processor (PSP) that may allow an attacker to zero any privileged register on the System Management Network which may lead to bypassing SPI ROM protections.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00248 Published 2021-11-16 Fixed in RomePI-SP3_1.0.0.C, MilanPI-SP3_1.0.0.4 CWE-20
TI-2021-08143 CVE-2021-26315 · GHSA-4qp6-97jw-9prg

Insufficient verification of data authenticity in AMD 3rd Gen AMD EPYC™

Priority LOW 33

When the AMD Platform Security Processor (PSP) boot rom loads, authenticates, and subsequently decrypts an encrypted FW, due to insufficient verification of the integrity of decrypted image, arbitrary code may be execute…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00165 Published 2021-11-16 Fixed in MilanPI-SP3_1.0.0.4 CWE-345
TI-2020-10279 CVE-2020-12954 · GHSA-rjfc-fv4g-m58q

Protection mechanism failure in AMD 1st Gen AMD EPYC™

Priority LOW 24

A side effect of an integrated chipset option may be able to be used by an attacker to bypass SPI ROM protections, allowing unauthorized SPI ROM modification.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00231 Published 2021-11-16 Fixed in NaplesPI-SP3_1.0.0.G, RomePI-SP3_1.0.0.C +1 CWE-693
TI-2021-08158 CVE-2021-26331 · GHSA-945g-xqmp-7xg3

Improper input validation in AMD 1st Gen AMD EPYC™

Priority LOW 34

AMD System Management Unit (SMU) contains a potential issue where a malicious user may be able to manipulate mailbox entries leading to arbitrary code execution.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00295 Published 2021-11-16 Fixed in NaplesPI-SP3_1.0.0.G, RomePI-SP3_1.0.0.C +1 CWE-20
TI-2021-08148 CVE-2021-26321 · GHSA-f2xj-57vr-m78h

Improper input validation in AMD 1st Gen AMD EPYC™

Priority LOW 24

Insufficient ID command validation in the SEV Firmware may allow a local authenticated attacker to perform a denial of service of the PSP.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00252 Published 2021-11-16 Fixed in NaplesPI-SP3_1.0.0.G, RomePI-SP3_1.0.0.C +1 CWE-20
TI-2021-08147 CVE-2021-26320 · GHSA-v3rf-32hp-hfhf

Improper certificate validation in AMD 1st Gen AMD EPYC™

Priority LOW 24

Insufficient validation of the AMD SEV Signing Key (ASK) in the SEND_START command in the SEV Firmware may allow a local authenticated attacker to perform a denial of service of the PSP

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00186 Published 2021-11-16 Fixed in NaplesPI-SP3_1.0.0.G, RomePI-SP3_1.0.0.C +1 CWE-295
TI-2021-08156 CVE-2021-26329 · GHSA-mr99-xfwj-whrq

Integer overflow in AMD 1st Gen AMD EPYC™

Priority LOW 24

AMD System Management Unit (SMU) may experience an integer overflow when an invalid length is provided which may result in a potential loss of resources.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00219 Published 2021-11-16 Fixed in NaplesPI-SP3_1.0.0.G, RomePI-SP3_1.0.0.C +1 CWE-130
TI-2021-08165 CVE-2021-26338 · GHSA-42wg-wpqj-99fc

Improper access control in AMD 2nd Gen AMD EPYC™

Priority LOW 35

Improper access controls in System Management Unit (SMU) may allow for an attacker to override performance control tables located in DRAM resulting in a potential lack of system resources.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00927 Published 2021-11-16 Fixed in RomePI-SP3_1.0.0.C, MilanPI-SP3_1.0.0.4 CWE-284