AR
Product
AMD Ryzen™Embedded R2000
12
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 7Medium 4Low 0
Watch
Add AMD Ryzen™Embedded R2000 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-0179 | 8.2 | Feb 11 | SMM Callout vulnerability within the AmdCpmDisplayFeatureSMM driver could allow locally authenticated attackers to overwrite SMRAM, potentially resulting in arbitrary code… Affected: EmbeddedR2KPIFP5 1.0.0.5 |
| CVE-2024-21925 | 8.2 | Feb 11 | Improper input validation within the AmdPspP2CmboxV2 driver may allow a privileged attacker to overwrite SMRAM, leading to arbitrary code execution Affected: All versions, or not specified |
| CVE-2023-20563 | 7.8 | Nov 14 | Insufficient protections in System Management Mode (SMM) code may allow an attacker to potentially enable escalation of privilege via local access Affected: various |
| CVE-2023-31343 | 7.5 | Feb 11 | Improper input validation in the SMM handler may allow a privileged attacker to overwrite SMRAM, potentially leading to arbitrary code execution Affected: "EmbeddedR2KPI-FP5 1.0.0.3" |
| CVE-2023-31342 | 7.5 | Feb 11 | Improper input validation in the SMM handler may allow a privileged attacker to overwrite SMRAM, potentially leading to arbitrary code execution Affected: All versions, or not specified |
| CVE-2023-31315 | 7.5 | Aug 9 | Improper validation in a model specific register (MSR) could allow a malicious program with ring0 access to modify SMM configuration while SMI lock is enabled, potentially leading… Affected: various |
| CVE-2023-20577 | 7.4 | Sep 2 | A heap overflow in SMM module may allow an attacker with access to a second vulnerability that enables writing to SPI flash, potentially resulting in arbitrary code execution Affected: All versions, or not specified |
Showing 7
