Known vulnerabilities in AMD EPYC™ Embedded 9003

Is your version affected?

CVE	Summary	Score	Published
CVE-2023-20577	A heap overflow in SMM module may allow an attacker with access to a second vulnerability that enables writing to SPI…	7.4 High	Sep 2, 2026
CVE-2023-20578	A TOCTOU (Time-Of-Check-Time-Of-Use) in SMM may allow an attacker with ring0 privileges and access to the BIOS menu or…	7.5 High	Aug 13, 2024
CVE-2023-31315	Improper validation in a model specific register (MSR) could allow a malicious program with ring0 access to modify SMM…	7.5 High	Aug 9, 2024
CVE-2024-21980	Improper restriction of write operations in SNP firmware could allow a malicious hypervisor to potentially overwrite a…	7.9 High	Aug 5, 2024
CVE-2024-21978	Improper input validation in SEV-SNP could allow a malicious hypervisor to read or overwrite guest memory potentially…	6.0 Medium	Aug 5, 2024
CVE-2023-31355	Improper restriction of write operations in SNP firmware could allow a malicious hypervisor to overwrite a guest's UMC…	6.0 Medium	Aug 5, 2024
CVE-2023-20566	Improper address validation in ASP with SNP enabled may potentially allow an attacker to compromise guest memory…	5.3 Medium	Nov 14, 2023
CVE-2021-46766	Improper clearing of sensitive data in the ASP Bootloader may expose secret keys to a privileged attacker accessing…	2.5 Low	Nov 14, 2023