Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

amd epyc 7301 - vulnerabilities and exploits

(subscribe to this query)
801
VMScore
CVE-2020-12967
The lack of nested page table protection in the AMD SEV/SEV-ES feature could potentially lead to arbitrary code execution within the guest VM if a malicious administrator has access to compromise the server hypervisor.
Amd Epyc 7251 -Amd Epyc 7261 -Amd Epyc 7281 -Amd Epyc 7301 -Amd Epyc 7351 -Amd Epyc 7351p -Amd Epyc 7371 -Amd Epyc 7401 -Amd Epyc 7401p -Amd Epyc 7451 -Amd Epyc 7501 -Amd Epyc 7551 -Amd Epyc 7551p -Amd Epyc 7601 -Amd Epyc 7763 -Amd Epyc 7713p -Amd Epyc 7713 -Amd Epyc 7663 -Amd Epyc 7643 -Amd Epyc 75f3 -Amd Epyc 7543p -Amd Epyc 7543 -
801
VMScore
CVE-2021-26311
In the AMD SEV/SEV-ES feature, memory can be rearranged in the guest address space that is not detected by the attestation mechanism which could be used by a malicious hypervisor to potentially lead to arbitrary code execution within the guest VM if a malicious administrator has ...
Amd Epyc 7251 -Amd Epyc 7261 -Amd Epyc 7281 -Amd Epyc 7301 -Amd Epyc 7351 -Amd Epyc 7351p -Amd Epyc 7371 -Amd Epyc 7401 -Amd Epyc 7401p -Amd Epyc 7451 -Amd Epyc 7501 -Amd Epyc 7551 -Amd Epyc 7551p -Amd Epyc 7601 -Amd Epyc 7763 -Amd Epyc 7713p -Amd Epyc 7713 -Amd Epyc 7663 -Amd Epyc 7643 -Amd Epyc 75f3 -Amd Epyc 7543p -Amd Epyc 7543 -
694
VMScore
CVE-2020-12988
A potential denial of service (DoS) vulnerability exists in the integrated chipset that may allow a malicious malicious user to hang the system when it is rebooted.
Amd Epyc 7001 FirmwareAmd Epyc 7002 FirmwareAmd Epyc 7003 FirmwareAmd Epyc 7232p FirmwareAmd Epyc 7251 FirmwareAmd Epyc 7252 FirmwareAmd Epyc 7261 FirmwareAmd Epyc 7262 FirmwareAmd Epyc 7272 FirmwareAmd Epyc 7281 FirmwareAmd Epyc 7282 FirmwareAmd Epyc 72f3 FirmwareAmd Epyc 7301 FirmwareAmd Epyc 7302 FirmwareAmd Epyc 7302p FirmwareAmd Epyc 7313 FirmwareAmd Epyc 7313p FirmwareAmd Epyc 7343 FirmwareAmd Epyc 7351 FirmwareAmd Epyc 7351p FirmwareAmd Epyc 7352 FirmwareAmd Epyc 7371 Firmware
641
VMScore
CVE-2021-26335
Improper input and range checking in the AMD Secure Processor (ASP) boot loader image header may allow an malicious user to use attacker-controlled values prior to signature validation potentially resulting in arbitrary code execution.
Amd Epyc 7003 FirmwareAmd Epyc 7002 FirmwareAmd Epyc 7001 FirmwareAmd Epyc 72f3 FirmwareAmd Epyc 7313 FirmwareAmd Epyc 7313p FirmwareAmd Epyc 7343 FirmwareAmd Epyc 73f3 FirmwareAmd Epyc 7413 FirmwareAmd Epyc 7443 FirmwareAmd Epyc 7443p FirmwareAmd Epyc 7453 FirmwareAmd Epyc 74f3 FirmwareAmd Epyc 7513 FirmwareAmd Epyc 7543 FirmwareAmd Epyc 7543p FirmwareAmd Epyc 75f3 FirmwareAmd Epyc 7643 FirmwareAmd Epyc 7663 FirmwareAmd Epyc 7713 FirmwareAmd Epyc 7713p FirmwareAmd Epyc 7763 Firmware
641
VMScore
CVE-2021-26331
AMD System Management Unit (SMU) contains a potential issue where a malicious user may be able to manipulate mailbox entries leading to arbitrary code execution.
Amd Epyc 7003 FirmwareAmd Epyc 7002 FirmwareAmd Epyc 7001 FirmwareAmd Epyc 72f3 FirmwareAmd Epyc 7313 FirmwareAmd Epyc 7313p FirmwareAmd Epyc 7343 FirmwareAmd Epyc 73f3 FirmwareAmd Epyc 7413 FirmwareAmd Epyc 7443 FirmwareAmd Epyc 7443p FirmwareAmd Epyc 7453 FirmwareAmd Epyc 74f3 FirmwareAmd Epyc 7513 FirmwareAmd Epyc 7543 FirmwareAmd Epyc 7543p FirmwareAmd Epyc 75f3 FirmwareAmd Epyc 7643 FirmwareAmd Epyc 7663 FirmwareAmd Epyc 7713 FirmwareAmd Epyc 7713p FirmwareAmd Epyc 7763 Firmware
587
VMScore
CVE-2021-26408
Insufficient validation of elliptic curve points in SEV-legacy firmware may compromise SEV-legacy guest migration potentially resulting in loss of guest's integrity or confidentiality.
Amd Epyc 7002 FirmwareAmd Epyc 7001 FirmwareAmd Epyc 7232p FirmwareAmd Epyc 7252 FirmwareAmd Epyc 7262 FirmwareAmd Epyc 7272 FirmwareAmd Epyc 7282 FirmwareAmd Epyc 7302 FirmwareAmd Epyc 7302p FirmwareAmd Epyc 7352 FirmwareAmd Epyc 7402 FirmwareAmd Epyc 7402p FirmwareAmd Epyc 7452 FirmwareAmd Epyc 7502 FirmwareAmd Epyc 7502p FirmwareAmd Epyc 7532 FirmwareAmd Epyc 7542 FirmwareAmd Epyc 7552 FirmwareAmd Epyc 7642 FirmwareAmd Epyc 7662 FirmwareAmd Epyc 7702 FirmwareAmd Epyc 7702p Firmware
445
VMScore
CVE-2021-26322
Persistent platform private key may not be protected with a random IV leading to a potential “two time pad attack”.
Amd Epyc 7601 FirmwareAmd Epyc 7551p FirmwareAmd Epyc 7551 FirmwareAmd Epyc 7501 FirmwareAmd Epyc 7451 FirmwareAmd Epyc 7401 FirmwareAmd Epyc 7371 FirmwareAmd Epyc 7351p FirmwareAmd Epyc 7351 FirmwareAmd Epyc 7301 FirmwareAmd Epyc 7281 FirmwareAmd Epyc 7261 FirmwareAmd Epyc 7251 FirmwareAmd Epyc 7f72 FirmwareAmd Epyc 7f52 FirmwareAmd Epyc 7f32 FirmwareAmd Epyc 7h12 FirmwareAmd Epyc 7742 FirmwareAmd Epyc 7702 FirmwareAmd Epyc 7702p FirmwareAmd Epyc 7662 FirmwareAmd Epyc 7642 Firmware
436
VMScore
CVE-2021-26321
Insufficient ID command validation in the SEV Firmware may allow a local authenticated malicious user to perform a denial of service of the PSP.
Amd Epyc 7601 FirmwareAmd Epyc 7551p FirmwareAmd Epyc 7551 FirmwareAmd Epyc 7501 FirmwareAmd Epyc 7451 FirmwareAmd Epyc 7401 FirmwareAmd Epyc 7371 FirmwareAmd Epyc 7351p FirmwareAmd Epyc 7351 FirmwareAmd Epyc 7301 FirmwareAmd Epyc 7281 FirmwareAmd Epyc 7261 FirmwareAmd Epyc 7251 FirmwareAmd Epyc 7f72 FirmwareAmd Epyc 7f52 FirmwareAmd Epyc 7f32 FirmwareAmd Epyc 7h12 FirmwareAmd Epyc 7742 FirmwareAmd Epyc 7702 FirmwareAmd Epyc 7702p FirmwareAmd Epyc 7662 FirmwareAmd Epyc 7642 Firmware
409
VMScore
CVE-2020-12944
Insufficient validation of BIOS image length by ASP Firmware could lead to arbitrary code execution.
Amd Epyc 7601 FirmwareAmd Epyc 7551p FirmwareAmd Epyc 7551 FirmwareAmd Epyc 7501 FirmwareAmd Epyc 7451 FirmwareAmd Epyc 7401 FirmwareAmd Epyc 7371 FirmwareAmd Epyc 7351p FirmwareAmd Epyc 7351 FirmwareAmd Epyc 7301 FirmwareAmd Epyc 7281 FirmwareAmd Epyc 7261 FirmwareAmd Epyc 7251 FirmwareAmd Epyc 7f72 FirmwareAmd Epyc 7f52 FirmwareAmd Epyc 7f32 FirmwareAmd Epyc 7h12 FirmwareAmd Epyc 7742 FirmwareAmd Epyc 7702 FirmwareAmd Epyc 7702p FirmwareAmd Epyc 7662 FirmwareAmd Epyc 7642 Firmware
392
VMScore
CVE-2020-12951
Race condition in ASP firmware could allow less privileged x86 code to perform ASP SMM (System Management Mode) operations.
Amd Epyc 7003 FirmwareAmd Epyc 7002 FirmwareAmd Epyc 7001 FirmwareAmd Epyc 72f3 FirmwareAmd Epyc 7313 FirmwareAmd Epyc 7313p FirmwareAmd Epyc 7343 FirmwareAmd Epyc 73f3 FirmwareAmd Epyc 7413 FirmwareAmd Epyc 7443 FirmwareAmd Epyc 7443p FirmwareAmd Epyc 7453 FirmwareAmd Epyc 74f3 FirmwareAmd Epyc 7513 FirmwareAmd Epyc 7543 FirmwareAmd Epyc 7543p FirmwareAmd Epyc 75f3 FirmwareAmd Epyc 7643 FirmwareAmd Epyc 7663 FirmwareAmd Epyc 7713 FirmwareAmd Epyc 7713p FirmwareAmd Epyc 7763 Firmware
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
path traversalCVE-2024-33545CVE-2024-35725CVE-2024-32704overflowfile uploadCVE-2024-0230CVE-2024-32705CVE-2024-23692
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook