Vulnerability Details CVE-2018-8930
The AMD EPYC Server, Ryzen, Ryzen Pro, and Ryzen Mobile processor chips have insufficient enforcement of Hardware Validated Boot, aka MASTERKEY-1, MASTERKEY-2, and MASTERKEY-3.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.006
EPSS Ranking 68.4%
CVSS Severity
CVSS v3 Score 9.0
CVSS v2 Score 9.3
References
- https://amdflaws.com/
- https://blog.trailofbits.com/2018/03/15/amd-flaws-technical-summary/
- https://community.amd.com/community/amd-corporate/blog/2018/03/21/initial-amd-technical-assessment-of-cts-labs-research
- https://safefirmware.com/amdflaws_whitepaper.pdf
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03841en_us
- https://amdflaws.com/
- https://blog.trailofbits.com/2018/03/15/amd-flaws-technical-summary/
- https://community.amd.com/community/amd-corporate/blog/2018/03/21/initial-amd-technical-assessment-of-cts-labs-research
- https://safefirmware.com/amdflaws_whitepaper.pdf
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03841en_us
Products affected by CVE-2018-8930
-
cpe:2.3:h:amd:epyc_server:-
-
cpe:2.3:h:amd:ryzen:-
-
cpe:2.3:h:amd:ryzen_mobile:-
-
cpe:2.3:h:amd:ryzen_pro:-
-
cpe:2.3:o:amd:epyc_server_firmware:-
-
cpe:2.3:o:amd:ryzen_firmware:-
-
cpe:2.3:o:amd:ryzen_mobile_firmware:-
-
cpe:2.3:o:amd:ryzen_pro_firmware:-