Known vulnerabilities in 1st Gen AMD EPYC™

Is your version affected?

CVE	Summary	Score	Published
CVE-2023-20520	Improper access control settings in ASP Bootloader may allow an attacker to corrupt the return address causing a…	9.8 Critical	May 9, 2023
CVE-2021-26408	Insufficient validation of elliptic curve points in SEV-legacy firmware may compromise SEV-legacy guest migration…	Not rated	May 10, 2022
CVE-2021-26330	AMD System Management Unit (SMU) may experience a heap-based overflow which may result in a loss of resources	Not rated	Nov 16, 2021
CVE-2020-12954	A side effect of an integrated chipset option may be able to be used by an attacker to bypass SPI ROM protections,…	Not rated	Nov 16, 2021
CVE-2021-26331	AMD System Management Unit (SMU) contains a potential issue where a malicious user may be able to manipulate mailbox…	Not rated	Nov 16, 2021
CVE-2021-26321	Insufficient ID command validation in the SEV Firmware may allow a local authenticated attacker to perform a denial of…	Not rated	Nov 16, 2021
CVE-2021-26320	Insufficient validation of the AMD SEV Signing Key (ASK) in the SEND_START command in the SEV Firmware may allow a local…	Not rated	Nov 16, 2021
CVE-2021-26322	Persistent platform private key may not be protected with a random IV leading to a potential “two time pad attack”	Not rated	Nov 16, 2021
CVE-2021-26329	AMD System Management Unit (SMU) may experience an integer overflow when an invalid length is provided which may…	Not rated	Nov 16, 2021