Amd: >> Epyc 7232p Firmware Security Vulnerabilities
A side effect of an integrated chipset option may be able to be used by an attacker to bypass SPI ROM protections, allowing unauthorized SPI ROM modification.
CVSS Score
5.5
EPSS Score
0.001
Published
2021-11-16
A potential vulnerability exists in AMD Platform Security Processor (PSP) that may allow an attacker to zero any privileged register on the System Management Network which may lead to bypassing SPI ROM protections.
CVSS Score
7.8
EPSS Score
0.001
Published
2021-11-16
Insufficient validation of the AMD SEV Signing Key (ASK) in the SEND_START command in the SEV Firmware may allow a local authenticated attacker to perform a denial of service of the PSP
CVSS Score
5.5
EPSS Score
0.0
Published
2021-11-16
Insufficient ID command validation in the SEV Firmware may allow a local authenticated attacker to perform a denial of service of the PSP.
CVSS Score
5.5
EPSS Score
0.001
Published
2021-11-16
Failure to validate SEV Commands while SNP is active may result in a potential impact to memory integrity.
CVSS Score
7.8
EPSS Score
0.001
Published
2021-11-16
Insufficient input validation in the SNP_GUEST_REQUEST command may lead to a potential data abort error and a denial of service.
CVSS Score
5.5
EPSS Score
0.001
Published
2021-11-16
Failure to flush the Translation Lookaside Buffer (TLB) of the I/O memory management unit (IOMMU) may lead an IO device to write to memory it should not be able to access, resulting in a potential loss of integrity.
CVSS Score
5.5
EPSS Score
0.0
Published
2021-11-16
Persistent platform private key may not be protected with a random IV leading to a potential “two time pad attack”.
CVSS Score
7.5
EPSS Score
0.004
Published
2021-11-16
Failure to validate VM_HSAVE_PA during SNP_INIT may result in a loss of memory integrity.
CVSS Score
7.8
EPSS Score
0.0
Published
2021-11-16
AMD System Management Unit (SMU) may experience an integer overflow when an invalid length is provided which may result in a potential loss of resources.
CVSS Score
5.5
EPSS Score
0.001
Published
2021-11-16