AMD 3rd Gen EPYC
At a glance
- Source
- NVD
- EPSS
- EPSS 0.19 % · percentile 9 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- AMD
- NVD status
- Modified
Description
Insufficient validation in ASP BIOS and DRTM commands may allow malicious supervisor x86 software to disclose the contents of sensitive memory which may result in information disclosure.
Weaknesses (CWE)
- CWE-668 — Exposure of Resource to Wrong Sphere
References
Scores
| Version | Score | Vector | Scored by |
|---|---|---|---|
| CVSS 3.1 | MEDIUM 5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N | CISA-ADP |
| CVSS 3.1 | MEDIUM 5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N | NVD · nvd@nist.gov (Primary) |
| CVSS 3.1 | MEDIUM 5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N | NVD · 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary) |
European references
- ENISA EUVD · EUVD-2021-13149
- GCVE · GCVE-0-2021-26343
Affected configurations (NVD CPE)
cpe:2.3:o:amd:epyc_7003_firmware:*:*:*:*:*:*:*:*< milanpi_1.0.0.3cpe:2.3:o:amd:epyc_72f3_firmware:*:*:*:*:*:*:*:*< milanpi_1.0.0.3cpe:2.3:o:amd:epyc_7313_firmware:*:*:*:*:*:*:*:*< milanpi_1.0.0.3cpe:2.3:o:amd:epyc_7313p_firmware:*:*:*:*:*:*:*:*< milanpi_1.0.0.3cpe:2.3:o:amd:epyc_7343_firmware:*:*:*:*:*:*:*:*< milanpi_1.0.0.3cpe:2.3:o:amd:epyc_7373x_firmware:*:*:*:*:*:*:*:*< milanpi_1.0.0.3cpe:2.3:o:amd:epyc_73f3_firmware:*:*:*:*:*:*:*:*< milanpi_1.0.0.3cpe:2.3:o:amd:epyc_7413_firmware:*:*:*:*:*:*:*:*< milanpi_1.0.0.3cpe:2.3:o:amd:epyc_7443_firmware:*:*:*:*:*:*:*:*< milanpi_1.0.0.3cpe:2.3:o:amd:epyc_7443p_firmware:*:*:*:*:*:*:*:*< milanpi_1.0.0.3cpe:2.3:o:amd:epyc_7453_firmware:*:*:*:*:*:*:*:*< milanpi_1.0.0.3cpe:2.3:o:amd:epyc_74f3_firmware:*:*:*:*:*:*:*:*< milanpi_1.0.0.3cpe:2.3:o:amd:epyc_7513_firmware:*:*:*:*:*:*:*:*< milanpi_1.0.0.3cpe:2.3:o:amd:epyc_7543_firmware:*:*:*:*:*:*:*:*< milanpi_1.0.0.3cpe:2.3:o:amd:epyc_7543p_firmware:*:*:*:*:*:*:*:*< milanpi_1.0.0.3cpe:2.3:o:amd:epyc_7573x_firmware:*:*:*:*:*:*:*:*< milanpi_1.0.0.3cpe:2.3:o:amd:epyc_75f3_firmware:*:*:*:*:*:*:*:*< milanpi_1.0.0.3cpe:2.3:o:amd:epyc_7643_firmware:*:*:*:*:*:*:*:*< milanpi_1.0.0.3cpe:2.3:o:amd:epyc_7663_firmware:*:*:*:*:*:*:*:*< milanpi_1.0.0.3cpe:2.3:o:amd:epyc_7713_firmware:*:*:*:*:*:*:*:*< milanpi_1.0.0.3cpe:2.3:o:amd:epyc_7713p_firmware:*:*:*:*:*:*:*:*< milanpi_1.0.0.3cpe:2.3:o:amd:epyc_7743_firmware:*:*:*:*:*:*:*:*< milanpi_1.0.0.3cpe:2.3:o:amd:epyc_7763_firmware:*:*:*:*:*:*:*:*< milanpi_1.0.0.3cpe:2.3:o:amd:epyc_7773x_firmware:*:*:*:*:*:*:*:*< milanpi_1.0.0.3
Affected products
| Product | Versions |
|---|---|
| AMD · 3rd Gen EPYC | affected various |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |