AR
Product
AMD Ryzen™ Threadripper™ PRO 3000WX Series Processors
15
CVEs
0
On KEV
8.2
Max CVSS
0
New 30D
Severity mix
Critical 0High 3Medium 6Low 6
Watch
Add AMD Ryzen™ Threadripper™ PRO 3000WX Series Processors to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-46772 | 3.9 | Aug 13 | Insufficient input validation in the ABL may allow a privileged attacker with access to the BIOS menu or UEFI shell to tamper with the structure headers in SPI ROM causing an out… Affected: All versions, or not specified |
| CVE-2021-26387 | 3.9 | Aug 13 | Insufficient access controls in ASP kernel may allow a privileged attacker with access to AMD signing keys and the BIOS menu or UEFI shell to map DRAM regions in protected… Affected: All versions, or not specified |
| CVE-2024-36348 | 3.8 | Jul 8 | A transient execution vulnerability in some AMD processors may allow a user process to infer the control registers speculatively even if UMIP feature is enabled, potentially… Affected: All versions, or not specified |
| CVE-2024-36349 | 3.8 | Jul 8 | A transient execution vulnerability in some AMD processors may allow a user process to infer TSC_AUX even when such a read is disabled, potentially resulting in information… Affected: All versions, or not specified |
| CVE-2023-20518 | 1.9 | Aug 13 | Incomplete cleanup in the ASP may expose the Master Encryption Key (MEK) to a privileged attacker with access to the BIOS menu or UEFI shell and a memory exfiltration… Affected: All versions, or not specified |
| CVE-2023-20540 | 1.8 | Jun 26 | An observable timing discrepancy in the ASP could allow a privileged attacker to perform a brute-force attack against the hash message authentication code, allowing arbitrary… Affected: All versions, or not specified |
Showing 6