E7
Product
Epyc 7303 Firmware
13
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 1High 5Medium 6Low 1
Watch
Add Epyc 7303 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-20578 | 6.4 | Aug 13 | A TOCTOU (Time-Of-Check-Time-Of-Use) in SMM may allow an attacker with ring0 privileges and access to the BIOS menu or UEFI shell to modify the communications buffer potentially… Affected: before milanpi_1.0.0.5 |
| CVE-2023-20584 | 6.0 | Aug 13 | IOMMU improperly handles certain special address ranges with invalid device table entries (DTEs), which may allow an attacker with privileges and a compromised Hypervisor to… Affected: before milanpi_1.0.0.b |
| CVE-2023-31355 | 6.0 | Aug 5 | Improper restriction of write operations in SNP firmware could allow a malicious hypervisor to overwrite a guest's UMC seed potentially allowing reading of memory from a… Affected: before milanpi_1.0.0.d |
| CVE-2023-31346 | 6.0 | Feb 13 | Failure to initialize memory in SEV Firmware may allow a privileged attacker to access stale data from other guests Affected: before milanpi_1.0.0.c |
| CVE-2023-31347 | 4.9 | Feb 13 | Due to a code bug in Secure_TSC, SEV firmware may allow an attacker with high privileges to cause a guest to observe an incorrect TSC when Secure TSC is enabled potentially… Affected: before milanpi_1.0.0.c |
| CVE-2021-26345 | 4.9 | Nov 14 | Failure to validate the value in APCB may allow a privileged attacker to tamper with the APCB token to force an out-of-bounds memory read potentially resulting in a denial of… Affected: before milanpi_1.0.0.a |
Showing 6