AMD AMD Ryzen™ Threadripper™ PRO 5000 WX-Series Processors
23 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2023-20572 | | An observable timing discrepancy in the ASP could allow a privileged attacker to perform a brute-force attack against the hash message authe | MEDIUM 5.6 | 0.2 % | ||
| CVE-2023-20540 | | An observable timing discrepancy in the ASP could allow a privileged attacker to perform a brute-force attack against the hash message authe | LOW 1.8 | 0.2 % | ||
| CVE-2021-46747 | | Insufficient granularity of access control in ASP (AMD Secure Processor) may allow an attacker with an untrusted user space application to m | HIGH 7.1 | 0.1 % | ||
| CVE-2025-48516 | | Insecure default configuration state of DDR5 memory module by AGESA Bootloader Firmware could allow an attacker with local user privilege to | MEDIUM 6.9 | 0.1 % | ||
| CVE-2021-26380 | | A compromised Trusted OS (TOS) driver could issue a malformed call that could potentially allow memory access outside the intended range re | LOW 1.8 | 0.1 % | ||
| CVE-2024-21962 | | Improper Input Validation in the AMD RAID driver could allow an attacker to point to an arbitrary memory location potentially resulting in p | HIGH 8.6 | 0.1 % | ||
| CVE-2026-0432 | | Incorrect default permissions in the installation directory for the AMD chipset driver could allow an attacker to achieve privilege escalati | HIGH 8.5 | 0.1 % | ||
| CVE-2025-62619 | | Missing authentication in the KVM key download endpoint could allow an unauthenticated attacker with knowledge of the exposed URL to retriev | MEDIUM 6.3 | 0.3 % | ||
| CVE-2025-62625 | | Improper privilege management in the KVM key download component could allow an attacker to swap tokens and download sensitive keys, potentia | MEDIUM 6.0 | 0.2 % | ||
| CVE-2025-54502 | | Incorrect use of boot service in the AMD Platform Configuration Blob (APCB) SMM driver could allow a privileged attacker with local access ( | HIGH 7.1 | 0.1 % | ||
| CVE-2023-31364 | | Improper handling of direct memory writes in the input-output memory management unit could allow a malicious guest virtual machine (VM) to f | HIGH 8.3 | 0.3 % | ||
| CVE-2025-52533 | | Improper Access Control in an on-chip debug interface could allow a privileged attacker to enable a debug interface and potentially compromi | HIGH 8.7 | 0.3 % | ||
| CVE-2021-26381 | | Improper system call parameter validation in the Trusted OS may allow a malicious driver to perform mapping or unmapping operations on a lar | HIGH 7.1 | 0.2 % | ||
| CVE-2025-29949 | | Insufficient input parameter sanitization in AMD Secure Processor (ASP) Boot Loader (legacy recovery mode only) could allow an attacker to w | MEDIUM 4.8 | 0.2 % | ||
| CVE-2024-36355 | | Improper input validation in the SMM handler could allow an attacker with Ring0 access to write to SMRAM and modify execution flow for S3 (s | HIGH 7.0 | 0.2 % | ||
| CVE-2025-29950 | | Improper input validation in system management mode (SMM) could allow a privileged attacker to overwrite stack memory leading to arbitrary c | HIGH 7.1 | 0.2 % | ||
| CVE-2024-36354 | | Improper input validation for DIMM serial presence detect (SPD) metadata could allow an attacker with physical access, ring0 access on a sys | HIGH 7.5 | 0.2 % | ||
| CVE-2024-21970 | | Improper validation of an array index in the AND power Management Firmware could allow a privileged attacker to corrupt AGESA memory potenti | MEDIUM 4.4 | 0.1 % | ||
| CVE-2024-21947 | | Improper input validation in the system management mode (SMM) could allow a privileged attacker to overwrite arbitrary memory potentially re | HIGH 7.5 | 0.1 % | ||
| CVE-2023-31330 | | An out-of-bounds read in the ASP could allow a privileged attacker with access to a malicious bootloader to potentially read sensitive memor | LOW 2.5 | 0.1 % | ||
| CVE-2021-26377 | | Insufficient parameter validation while allocating process space in the Trusted OS (TOS) may allow for a malicious userspace process to trig | MEDIUM 4.1 | 0.2 % | ||
| CVE-2024-21977 | | Incomplete cleanup after loading a CPU microcode patch may allow a privileged attacker to degrade the entropy of the RDRAND instruction, pot | LOW 3.2 | 0.1 % | ||
| CVE-2022-23817 | | Insufficient checking of memory buffer in AMD Secure Processor (ASP) Secure OS may allow an attacker with a malicious trusted application to | HIGH 7.3 | 0.2 % |