Skip to main content

Epyc Server Firmware

3 CVEs product

Monthly

CVE-2018-8936 Mar 22, 14:29 CRITICAL Act Now

The AMD EPYC Server, Ryzen, Ryzen Pro, and Ryzen Mobile processor chips allow Platform Security Processor (PSP) privilege escalation. Rated critical severity (CVSS 9.0), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

Privilege Escalation Amd Ryzen Mobile Firmware Ryzen Pro Firmware Epyc Server Firmware +1
NVD
CVSS 3.0
9.0
EPSS
1.8%
CVE-2018-8933 Mar 22, 14:29 CRITICAL Act Now

The AMD EPYC Server processor chips have insufficient access control for protected memory regions, aka FALLOUT-1, FALLOUT-2, and FALLOUT-3. Rated critical severity (CVSS 9.0), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

Information Disclosure Amd Epyc Server Firmware
NVD
CVSS 3.0
9.0
EPSS
1.7%
CVE-2018-8930 Mar 22, 14:29 CRITICAL Act Now

The AMD EPYC Server, Ryzen, Ryzen Pro, and Ryzen Mobile processor chips have insufficient enforcement of Hardware Validated Boot, aka MASTERKEY-1, MASTERKEY-2, and MASTERKEY-3. Rated critical severity (CVSS 9.0), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

Information Disclosure Amd Ryzen Mobile Firmware Ryzen Pro Firmware Epyc Server Firmware +1
NVD
CVSS 3.0
9.0
EPSS
1.8%
EPSS 2% CVSS 9.0
CRITICAL Act Now

The AMD EPYC Server, Ryzen, Ryzen Pro, and Ryzen Mobile processor chips allow Platform Security Processor (PSP) privilege escalation. Rated critical severity (CVSS 9.0), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

Privilege Escalation Amd Ryzen Mobile Firmware +3
NVD
EPSS 2% CVSS 9.0
CRITICAL Act Now

The AMD EPYC Server processor chips have insufficient access control for protected memory regions, aka FALLOUT-1, FALLOUT-2, and FALLOUT-3. Rated critical severity (CVSS 9.0), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

Information Disclosure Amd Epyc Server Firmware
NVD
EPSS 2% CVSS 9.0
CRITICAL Act Now

The AMD EPYC Server, Ryzen, Ryzen Pro, and Ryzen Mobile processor chips have insufficient enforcement of Hardware Validated Boot, aka MASTERKEY-1, MASTERKEY-2, and MASTERKEY-3. Rated critical severity (CVSS 9.0), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

Information Disclosure Amd Ryzen Mobile Firmware +3
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy