AMD AMD EPYC™ Embedded 7003 Series Processors
27 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2025-61971 | | Missing lock bit protection for NBIO registers could allow a local admin-privileged attacker to modify MMIO routing configurations, potentia | MEDIUM 5.9 | 0.1 % | ||
| CVE-2025-54510 | | A missing lock verification in AMD Secure Processor (ASP) firmware may permit a locally authenticated attacker with administrative privilege | MEDIUM 5.9 | 0.1 % | ||
| CVE-2023-20585 | | Insufficient checks of the RMP on host buffer access in IOMMU may allow an attacker with privileges and a compromised hypervisor to trigger | MEDIUM 5.6 | 0.1 % | ||
| CVE-2023-31364 | | Improper handling of direct memory writes in the input-output memory management unit could allow a malicious guest virtual machine (VM) to f | HIGH 8.3 | 0.3 % | ||
| CVE-2025-52533 | | Improper Access Control in an on-chip debug interface could allow a privileged attacker to enable a debug interface and potentially compromi | HIGH 8.7 | 0.3 % | ||
| CVE-2025-0031 | | A use after free in the SEV firmware could allow a malicous hypervisor to activate a migrated guest with the SINGLE_SOCKET policy on a diffe | MEDIUM 4.6 | 0.1 % | ||
| CVE-2025-48514 | | Insufficient Granularity of Access Control in SEV firmware can allow a privileged attacker to create a SEV-ES Guest to attack SNP guest, pot | MEDIUM 4.0 | 0.2 % | ||
| CVE-2025-48509 | | Missing Checks in certain functions related to RMP initialization can allow a local admin privileged attacker to cause misidentification of | LOW 1.8 | 0.1 % | ||
| CVE-2025-29939 | | Improper access control in secure encrypted virtualization (SEV) could allow a privileged attacker to write to the reverse map page (RMP) du | MEDIUM 6.9 | 0.2 % | ||
| CVE-2025-29950 | | Improper input validation in system management mode (SMM) could allow a privileged attacker to overwrite stack memory leading to arbitrary c | HIGH 7.1 | 0.2 % | ||
| CVE-2025-52536 | | Improper Prevention of Lock Bit Modification in SEV firmware could allow a privileged attacker to downgrade firmware potentially resulting i | MEDIUM 6.7 | 0.2 % | ||
| CVE-2025-29943 | | Write what were condition within AMD CPUs may allow an admin-privileged attacker to modify the configuration of the CPU pipeline potentially | MEDIUM 4.6 | 0.2 % | ||
| CVE-2025-29934 | | A bug within some AMD CPUs could allow a local admin-privileged attacker to run a SEV-SNP guest using stale TLB entries, potentially resulti | MEDIUM 5.3 | 0.1 % | ||
| CVE-2024-36354 | | Improper input validation for DIMM serial presence detect (SPD) metadata could allow an attacker with physical access, ring0 access on a sys | HIGH 7.5 | 0.2 % | ||
| CVE-2023-31351 | | Improper restriction of operations in the IOMMU could allow a malicious hypervisor to access guest private memory resulting in loss of integ | MEDIUM 5.3 | 0.1 % | ||
| CVE-2024-21977 | | Incomplete cleanup after loading a CPU microcode patch may allow a privileged attacker to degrade the entropy of the RDRAND instruction, pot | LOW 3.2 | 0.1 % | ||
| CVE-2024-36357 | | A transient execution vulnerability in some AMD processors may allow an attacker to infer data in the L1D cache, potentially resulting in th | MEDIUM 5.6 | 0.4 % | ||
| CVE-2024-36350 | | A transient execution vulnerability in some AMD processors may allow an attacker to infer data from previous stores, potentially resulting i | MEDIUM 5.6 | 0.5 % | ||
| CVE-2024-36348 | | A transient execution vulnerability in some AMD processors may allow a user process to infer the control registers speculatively even if UMI | LOW 3.8 | 0.3 % | ||
| CVE-2024-36349 | | A transient execution vulnerability in some AMD processors may allow a user process to infer TSC_AUX even when such a read is disabled, pote | LOW 3.8 | 0.2 % | ||
| CVE-2023-20599 | | Improper register access control in ASP may allow a privileged attacker to perform unauthorized access to ASP’s Crypto Co-Processor (CCP) re | HIGH 7.9 | 0.2 % | ||
| CVE-2024-21981 | | Improper key usage control in AMD Secure Processor (ASP) may allow an attacker with local access who has gained arbitrary code execution pri | MEDIUM 5.7 | 0.1 % | ||
| CVE-2023-20591 | | Improper re-initialization of IOMMU during the DRTM event may permit an untrusted platform configuration to persist, allowing an attacker to | CRITICAL 10.0 | 0.3 % | ||
| CVE-2021-46772 | | Insufficient input validation in the ABL may allow a privileged attacker with access to the BIOS menu or UEFI shell to tamper with the struc | LOW 3.9 | 0.2 % | ||
| CVE-2021-46746 | | Lack of stack protection exploit mechanisms in ASP Secure OS Trusted Execution Environment (TEE) may allow a privileged attacker with access | MEDIUM 5.2 | 0.2 % | ||
| CVE-2021-26387 | | Insufficient access controls in ASP kernel may allow a privileged attacker with access to AMD signing keys and the BIOS menu or UEFI shell t | LOW 3.9 | 0.1 % | ||
| CVE-2021-26344 | | An out of bounds memory write when processing the AMD PSP1 Configuration Block (APCB) could allow an attacker with access the ability to mod | HIGH 8.2 | 0.2 % |