AMD 1st Gen AMD EPYC™
9 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2023-20520 | various | Improper access control settings in ASP Bootloader may allow an attacker to corrupt the return address causing a stack-based buffer overrun | CRITICAL 9.8 | 0.8 % | ||
| CVE-2021-26408 | unspecified – < NaplesPI-SP3_1.0.0.G | Insufficient validation of elliptic curve points in SEV-legacy firmware may compromise SEV-legacy guest migration potentially resulting in l | HIGH 7.1 | 0.3 % | ||
| CVE-2021-26330 | unspecified – < NaplesPI-SP3_1.0.0.G | AMD System Management Unit (SMU) may experience a heap-based overflow which may result in a loss of resources. | MEDIUM 5.5 | 0.2 % | ||
| CVE-2020-12954 | unspecified – < NaplesPI-SP3_1.0.0.G | A side effect of an integrated chipset option may be able to be used by an attacker to bypass SPI ROM protections, allowing unauthorized SPI | MEDIUM 5.5 | 0.2 % | ||
| CVE-2021-26331 | unspecified – < NaplesPI-SP3_1.0.0.G | AMD System Management Unit (SMU) contains a potential issue where a malicious user may be able to manipulate mailbox entries leading to arbi | HIGH 7.8 | 0.3 % | ||
| CVE-2021-26321 | unspecified – < NaplesPI-SP3_1.0.0.G | Insufficient ID command validation in the SEV Firmware may allow a local authenticated attacker to perform a denial of service of the PSP. | MEDIUM 5.5 | 0.3 % | ||
| CVE-2021-26320 | unspecified – < NaplesPI-SP3_1.0.0.G | Insufficient validation of the AMD SEV Signing Key (ASK) in the SEND_START command in the SEV Firmware may allow a local authenticated attac | MEDIUM 5.5 | 0.2 % | ||
| CVE-2021-26322 | unspecified – < NaplesPI-SP3_1.0.0.G | Persistent platform private key may not be protected with a random IV leading to a potential “two time pad attack”. | HIGH 7.5 | 1.0 % | ||
| CVE-2021-26329 | unspecified – < NaplesPI-SP3_1.0.0.G | AMD System Management Unit (SMU) may experience an integer overflow when an invalid length is provided which may result in a potential loss | MEDIUM 5.5 | 0.2 % |