Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

amd epyc 7302 - vulnerabilities and exploits

(subscribe to this query)
801
VMScore
CVE-2020-12967
The lack of nested page table protection in the AMD SEV/SEV-ES feature could potentially lead to arbitrary code execution within the guest VM if a malicious administrator has access to compromise the server hypervisor.
Amd Epyc 7251 -Amd Epyc 7261 -Amd Epyc 7281 -Amd Epyc 7301 -Amd Epyc 7351 -Amd Epyc 7351p -Amd Epyc 7371 -Amd Epyc 7401 -Amd Epyc 7401p -Amd Epyc 7451 -Amd Epyc 7501 -Amd Epyc 7551 -Amd Epyc 7551p -Amd Epyc 7601 -Amd Epyc 7763 -Amd Epyc 7713p -Amd Epyc 7713 -Amd Epyc 7663 -Amd Epyc 7643 -Amd Epyc 75f3 -Amd Epyc 7543p -Amd Epyc 7543 -
801
VMScore
CVE-2021-26311
In the AMD SEV/SEV-ES feature, memory can be rearranged in the guest address space that is not detected by the attestation mechanism which could be used by a malicious hypervisor to potentially lead to arbitrary code execution within the guest VM if a malicious administrator has ...
Amd Epyc 7251 -Amd Epyc 7261 -Amd Epyc 7281 -Amd Epyc 7301 -Amd Epyc 7351 -Amd Epyc 7351p -Amd Epyc 7371 -Amd Epyc 7401 -Amd Epyc 7401p -Amd Epyc 7451 -Amd Epyc 7501 -Amd Epyc 7551 -Amd Epyc 7551p -Amd Epyc 7601 -Amd Epyc 7763 -Amd Epyc 7713p -Amd Epyc 7713 -Amd Epyc 7663 -Amd Epyc 7643 -Amd Epyc 75f3 -Amd Epyc 7543p -Amd Epyc 7543 -
694
VMScore
CVE-2021-26338
Improper access controls in System Management Unit (SMU) may allow for an malicious user to override performance control tables located in DRAM resulting in a potential lack of system resources.
Amd Epyc 7f72 FirmwareAmd Epyc 7f52 FirmwareAmd Epyc 7f32 FirmwareAmd Epyc 7h12 FirmwareAmd Epyc 7742 FirmwareAmd Epyc 7702 FirmwareAmd Epyc 7702p FirmwareAmd Epyc 7662 FirmwareAmd Epyc 7642 FirmwareAmd Epyc 7552 FirmwareAmd Epyc 7542 FirmwareAmd Epyc 7532 FirmwareAmd Epyc 7502 FirmwareAmd Epyc 7502p FirmwareAmd Epyc 7452 FirmwareAmd Epyc 7402 FirmwareAmd Epyc 7402p FirmwareAmd Epyc 7352 FirmwareAmd Epyc 7302 FirmwareAmd Epyc 7302p FirmwareAmd Epyc 7282 FirmwareAmd Epyc 7272 Firmware
694
VMScore
CVE-2020-12988
A potential denial of service (DoS) vulnerability exists in the integrated chipset that may allow a malicious malicious user to hang the system when it is rebooted.
Amd Epyc 7001 FirmwareAmd Epyc 7002 FirmwareAmd Epyc 7003 FirmwareAmd Epyc 7232p FirmwareAmd Epyc 7251 FirmwareAmd Epyc 7252 FirmwareAmd Epyc 7261 FirmwareAmd Epyc 7262 FirmwareAmd Epyc 7272 FirmwareAmd Epyc 7281 FirmwareAmd Epyc 7282 FirmwareAmd Epyc 72f3 FirmwareAmd Epyc 7301 FirmwareAmd Epyc 7302 FirmwareAmd Epyc 7302p FirmwareAmd Epyc 7313 FirmwareAmd Epyc 7313p FirmwareAmd Epyc 7343 FirmwareAmd Epyc 7351 FirmwareAmd Epyc 7351p FirmwareAmd Epyc 7352 FirmwareAmd Epyc 7371 Firmware
641
VMScore
CVE-2021-26335
Improper input and range checking in the AMD Secure Processor (ASP) boot loader image header may allow an malicious user to use attacker-controlled values prior to signature validation potentially resulting in arbitrary code execution.
Amd Epyc 7003 FirmwareAmd Epyc 7002 FirmwareAmd Epyc 7001 FirmwareAmd Epyc 72f3 FirmwareAmd Epyc 7313 FirmwareAmd Epyc 7313p FirmwareAmd Epyc 7343 FirmwareAmd Epyc 73f3 FirmwareAmd Epyc 7413 FirmwareAmd Epyc 7443 FirmwareAmd Epyc 7443p FirmwareAmd Epyc 7453 FirmwareAmd Epyc 74f3 FirmwareAmd Epyc 7513 FirmwareAmd Epyc 7543 FirmwareAmd Epyc 7543p FirmwareAmd Epyc 75f3 FirmwareAmd Epyc 7643 FirmwareAmd Epyc 7663 FirmwareAmd Epyc 7713 FirmwareAmd Epyc 7713p FirmwareAmd Epyc 7763 Firmware
641
VMScore
CVE-2021-26331
AMD System Management Unit (SMU) contains a potential issue where a malicious user may be able to manipulate mailbox entries leading to arbitrary code execution.
Amd Epyc 7003 FirmwareAmd Epyc 7002 FirmwareAmd Epyc 7001 FirmwareAmd Epyc 72f3 FirmwareAmd Epyc 7313 FirmwareAmd Epyc 7313p FirmwareAmd Epyc 7343 FirmwareAmd Epyc 73f3 FirmwareAmd Epyc 7413 FirmwareAmd Epyc 7443 FirmwareAmd Epyc 7443p FirmwareAmd Epyc 7453 FirmwareAmd Epyc 74f3 FirmwareAmd Epyc 7513 FirmwareAmd Epyc 7543 FirmwareAmd Epyc 7543p FirmwareAmd Epyc 75f3 FirmwareAmd Epyc 7643 FirmwareAmd Epyc 7663 FirmwareAmd Epyc 7713 FirmwareAmd Epyc 7713p FirmwareAmd Epyc 7763 Firmware
587
VMScore
CVE-2021-26408
Insufficient validation of elliptic curve points in SEV-legacy firmware may compromise SEV-legacy guest migration potentially resulting in loss of guest's integrity or confidentiality.
Amd Epyc 7002 FirmwareAmd Epyc 7001 FirmwareAmd Epyc 7232p FirmwareAmd Epyc 7252 FirmwareAmd Epyc 7262 FirmwareAmd Epyc 7272 FirmwareAmd Epyc 7282 FirmwareAmd Epyc 7302 FirmwareAmd Epyc 7302p FirmwareAmd Epyc 7352 FirmwareAmd Epyc 7402 FirmwareAmd Epyc 7402p FirmwareAmd Epyc 7452 FirmwareAmd Epyc 7502 FirmwareAmd Epyc 7502p FirmwareAmd Epyc 7532 FirmwareAmd Epyc 7542 FirmwareAmd Epyc 7552 FirmwareAmd Epyc 7642 FirmwareAmd Epyc 7662 FirmwareAmd Epyc 7702 FirmwareAmd Epyc 7702p Firmware
587
VMScore
CVE-2021-26370
Improper validation of destination address in SVC_LOAD_FW_IMAGE_BY_INSTANCE and SVC_LOAD_BINARY_BY_ATTRIB in a malicious UApp or ABL may allow an malicious user to overwrite arbitrary bootloader memory with SPI ROM contents resulting in a loss of integrity and availability.
Amd Epyc 7763 FirmwareAmd Epyc 7713p FirmwareAmd Epyc 7713 FirmwareAmd Epyc 7663 FirmwareAmd Epyc 7643 FirmwareAmd Epyc 75f3 FirmwareAmd Epyc 7543p FirmwareAmd Epyc 7543 FirmwareAmd Epyc 7513 FirmwareAmd Epyc 7453 FirmwareAmd Epyc 74f3 FirmwareAmd Epyc 7443p FirmwareAmd Epyc 7443 FirmwareAmd Epyc 7413 FirmwareAmd Epyc 73f3 FirmwareAmd Epyc 7343 FirmwareAmd Epyc 7313p FirmwareAmd Epyc 7313 FirmwareAmd Epyc 72f3 FirmwareAmd Epyc 7773x FirmwareAmd Epyc 7473x FirmwareAmd Epyc 7573x Firmware
587
VMScore
CVE-2020-12946
Insufficient input validation in ASP firmware for discrete TPM commands could allow a potential loss of integrity and denial of service.
Amd Epyc 7f72 FirmwareAmd Epyc 7f52 FirmwareAmd Epyc 7f32 FirmwareAmd Epyc 7h12 FirmwareAmd Epyc 7742 FirmwareAmd Epyc 7702 FirmwareAmd Epyc 7702p FirmwareAmd Epyc 7662 FirmwareAmd Epyc 7642 FirmwareAmd Epyc 7552 FirmwareAmd Epyc 7542 FirmwareAmd Epyc 7532 FirmwareAmd Epyc 7502 FirmwareAmd Epyc 7502p FirmwareAmd Epyc 7452 FirmwareAmd Epyc 7402 FirmwareAmd Epyc 7402p FirmwareAmd Epyc 7352 FirmwareAmd Epyc 7302 FirmwareAmd Epyc 7302p FirmwareAmd Epyc 7282 FirmwareAmd Epyc 7272 Firmware
445
VMScore
CVE-2021-26322
Persistent platform private key may not be protected with a random IV leading to a potential “two time pad attack”.
Amd Epyc 7601 FirmwareAmd Epyc 7551p FirmwareAmd Epyc 7551 FirmwareAmd Epyc 7501 FirmwareAmd Epyc 7451 FirmwareAmd Epyc 7401 FirmwareAmd Epyc 7371 FirmwareAmd Epyc 7351p FirmwareAmd Epyc 7351 FirmwareAmd Epyc 7301 FirmwareAmd Epyc 7281 FirmwareAmd Epyc 7261 FirmwareAmd Epyc 7251 FirmwareAmd Epyc 7f72 FirmwareAmd Epyc 7f52 FirmwareAmd Epyc 7f32 FirmwareAmd Epyc 7h12 FirmwareAmd Epyc 7742 FirmwareAmd Epyc 7702 FirmwareAmd Epyc 7702p FirmwareAmd Epyc 7662 FirmwareAmd Epyc 7642 Firmware
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
path traversalCVE-2024-33545CVE-2024-35725CVE-2024-32704overflowfile uploadCVE-2024-0230CVE-2024-32705CVE-2024-23692
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook