Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
828
VMScore

CVE-2018-8930

Published: 22/03/2018 Updated: 24/08/2020
CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6
CVSS v3 Base Score: 9 | Impact Score: 6 | Exploitability Score: 2.2
VMScore: 828
Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Subscribe to Amd

Vulnerability Summary

The AMD EPYC Server, Ryzen, Ryzen Pro, and Ryzen Mobile processor chips have insufficient enforcement of Hardware Validated Boot, aka MASTERKEY-1, MASTERKEY-2, and MASTERKEY-3.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

amd ryzen_mobile_firmware -

amd ryzen_pro_firmware -

amd epyc_server_firmware -

amd ryzen_firmware -

Vendor Advisories

HP: SUPPORT COMMUNICATION- SECURITY BULLETIN HPSBHF03581 rev. 4 - AMD Secure Processor and Promontory Chipset Exploits
Vulnerability Description Impact MASTERKEY Attacker who already has compromised the security of a system updates flash to corrupt its contents AMD Secure Processor (PSP) checks do not detect the corruption Requires administrative access to the targeted system Circumvention of platform security controls These changes are persistent f ...

References

NVD-CWE-noinfohttps://safefirmware.com/amdflaws_whitepaper.pdfhttps://community.amd.com/community/amd-corporate/blog/2018/03/21/initial-amd-technical-assessment-of-cts-labs-researchhttps://blog.trailofbits.com/2018/03/15/amd-flaws-technical-summary/https://amdflaws.com/https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03841en_ushttps://nvd.nist.govhttps://support.hp.com/us-en/document/c05950716
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionSSRFbuffer overflowCVE-2023-28952CVE-2023-41822CVE-2024-27956CVE-2023-7028CVE-2024-34447CVE-2024-34460
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook