7.1
Élevée
CVE-2023-20587 Improper Access Control in System Management Mode (SMM) may allow an attacker access to the SPI flash potentially…
Description
Improper Access Control in System Management Mode (SMM) may allow an attacker access to the SPI flash potentially leading to arbitrary code execution.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| 3rd Gen AMD EPYC™ Processors | Versions non publiées | |
| 4th Gen AMD EPYC™ Processors | Versions non publiées | |
| 1st Gen AMD EPYC™ Processors | Versions non publiées | |
| 2nd Gen AMD EPYC™ Processors | Versions non publiées | |
| AMD EPYC(TM) Embedded 3000 | Versions non publiées | |
| AMD EPYC(TM) Embedded 7002 | Versions non publiées | |
| AMD EPYC(TM) Embedded 7003 | Versions non publiées | |
| AMD EPYC(TM) Embedded 9003 | Versions non publiées |
Références
- www.amd.com www.amd.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de 3rd Gen AMD EPYC™ Processors
Les 25 CVE de 3rd Gen AMD EPYC™ Processors →
CVE-2023-20577
A heap overflow in SMM module may allow an attacker with access to a second vulnerability that enables writing to SPI…
7.4
Élevée
CVE-2023-31315
Improper validation in a model specific register (MSR) could allow a malicious program with ring0 access to modify SMM…
7.5
Élevée
CVE-2024-21980
Improper restriction of write operations in SNP firmware could allow a malicious hypervisor to potentially overwrite a…
7.9
Élevée
CVE-2024-21978
Improper input validation in SEV-SNP could allow a malicious hypervisor to read or overwrite guest memory potentially…
6.0
Moyenne