AMD 3rd Gen EPYC
En bref
- Source
- NVD
- EPSS
- EPSS 0.19 % · centile 9 ()
- État
- PUBLISHED
- Publiée
- Mise à jour
- Attribuée par
- AMD
- Statut NVD
- Modified
Description
Insufficient validation in ASP BIOS and DRTM commands may allow malicious supervisor x86 software to disclose the contents of sensitive memory which may result in information disclosure.
Faiblesses (CWE)
- CWE-668 — Exposition d'une ressource à la mauvaise sphère
Références
Scores
| Version | Score | Vecteur | Évalué par |
|---|---|---|---|
| CVSS 3.1 | MEDIUM 5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N | CISA-ADP |
| CVSS 3.1 | MEDIUM 5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N | NVD · nvd@nist.gov (Primary) |
| CVSS 3.1 | MEDIUM 5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N | NVD · 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary) |
Références européennes
- ENISA EUVD · EUVD-2021-13149
- GCVE · GCVE-0-2021-26343
Configurations affectées (CPE NVD)
cpe:2.3:o:amd:epyc_7003_firmware:*:*:*:*:*:*:*:*< milanpi_1.0.0.3cpe:2.3:o:amd:epyc_72f3_firmware:*:*:*:*:*:*:*:*< milanpi_1.0.0.3cpe:2.3:o:amd:epyc_7313_firmware:*:*:*:*:*:*:*:*< milanpi_1.0.0.3cpe:2.3:o:amd:epyc_7313p_firmware:*:*:*:*:*:*:*:*< milanpi_1.0.0.3cpe:2.3:o:amd:epyc_7343_firmware:*:*:*:*:*:*:*:*< milanpi_1.0.0.3cpe:2.3:o:amd:epyc_7373x_firmware:*:*:*:*:*:*:*:*< milanpi_1.0.0.3cpe:2.3:o:amd:epyc_73f3_firmware:*:*:*:*:*:*:*:*< milanpi_1.0.0.3cpe:2.3:o:amd:epyc_7413_firmware:*:*:*:*:*:*:*:*< milanpi_1.0.0.3cpe:2.3:o:amd:epyc_7443_firmware:*:*:*:*:*:*:*:*< milanpi_1.0.0.3cpe:2.3:o:amd:epyc_7443p_firmware:*:*:*:*:*:*:*:*< milanpi_1.0.0.3cpe:2.3:o:amd:epyc_7453_firmware:*:*:*:*:*:*:*:*< milanpi_1.0.0.3cpe:2.3:o:amd:epyc_74f3_firmware:*:*:*:*:*:*:*:*< milanpi_1.0.0.3cpe:2.3:o:amd:epyc_7513_firmware:*:*:*:*:*:*:*:*< milanpi_1.0.0.3cpe:2.3:o:amd:epyc_7543_firmware:*:*:*:*:*:*:*:*< milanpi_1.0.0.3cpe:2.3:o:amd:epyc_7543p_firmware:*:*:*:*:*:*:*:*< milanpi_1.0.0.3cpe:2.3:o:amd:epyc_7573x_firmware:*:*:*:*:*:*:*:*< milanpi_1.0.0.3cpe:2.3:o:amd:epyc_75f3_firmware:*:*:*:*:*:*:*:*< milanpi_1.0.0.3cpe:2.3:o:amd:epyc_7643_firmware:*:*:*:*:*:*:*:*< milanpi_1.0.0.3cpe:2.3:o:amd:epyc_7663_firmware:*:*:*:*:*:*:*:*< milanpi_1.0.0.3cpe:2.3:o:amd:epyc_7713_firmware:*:*:*:*:*:*:*:*< milanpi_1.0.0.3cpe:2.3:o:amd:epyc_7713p_firmware:*:*:*:*:*:*:*:*< milanpi_1.0.0.3cpe:2.3:o:amd:epyc_7743_firmware:*:*:*:*:*:*:*:*< milanpi_1.0.0.3cpe:2.3:o:amd:epyc_7763_firmware:*:*:*:*:*:*:*:*< milanpi_1.0.0.3cpe:2.3:o:amd:epyc_7773x_firmware:*:*:*:*:*:*:*:*< milanpi_1.0.0.3
Produits affectés
| Produit | Versions |
|---|---|
| AMD · 3rd Gen EPYC | affected various |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |