Vulnerability-Lookup

Search criteria

Vendor

Product

Assigner (CNA or root)

Sources

Sort by

Order

CVSS min

CVSS max

Apply ordering (override relevance)

CVE-2023-20591 (GCVE-0-2023-20591)

Vulnerability from cvelistv5 – Published: 2024-08-13 16:53 – Updated: 2025-03-13 16:41

Summary

Improper re-initialization of IOMMU during the DRTM event may permit an untrusted platform configuration to persist, allowing an attacker to read or modify hypervisor memory, potentially resulting in loss of confidentiality, integrity, and availability.

Severity

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-08-14 13:13 UTC

CWE

CWE-665 - Improper Initialization

Assigner

AMD mitre root

References

1 reference

URL	Tags
https://www.amd.com/en/resources/product-security…	vendor-advisory

Impacted products

8 products

Vendor	Product	Version
AMD	AMD EPYC™ 7003 Series Processors	Unaffected: MilanPI 1.0.0.B (PI)
AMD	AMD EPYC™ 9004 Series Processors	Unaffected: Genoa 1.0.0.8
AMD	AMD EPYC™ Embedded 7003 Series Processors	Unaffected: EmbMilanPI-SP3 1.0.0.7
AMD	AMD EPYC™ Embedded 9003 Series Processors	Unaffected: EmbGenoaPI-SP5 1.0.0.3
amd	epyc_7003_firmware	Affected: 0 , < milanpi_1.0.0.b (custom) cpe:2.3:o:amd:epyc_7003_firmware::::::::
amd	epyc_9003_firmware	Affected: 0 , < genoapi_1.0.0.8 (custom) cpe:2.3:o:amd:epyc_9003_firmware::::::::
amd	epyc_7773x_firmware	Affected: 0 , < milanpi_1.0.0.b (custom) cpe:2.3:o:amd:epyc_7203_firmware:-:::::::* cpe:2.3:o:amd:epyc_7203p_firmware:-:::::::* cpe:2.3:o:amd:epyc_72f3_firmware:-:::::::* cpe:2.3:o:amd:epyc_7303_firmware:-:::::::* cpe:2.3:o:amd:epyc_7303p_firmware:-:::::::* cpe:2.3:o:amd:epyc_7313p_firmware:-:::::::* cpe:2.3:o:amd:epyc_7343_firmware:-:::::::* cpe:2.3:o:amd:epyc_7373x_firmware:-:::::::* cpe:2.3:o:amd:epyc_7413_firmware:-:::::::* cpe:2.3:o:amd:epyc_7443_firmware:-:::::::* cpe:2.3:o:amd:epyc_7443p_firmware:-:::::::* cpe:2.3:o:amd:epyc_7453_firmware:-:::::::* cpe:2.3:o:amd:epyc_7473x_firmware:-:::::::* cpe:2.3:o:amd:epyc_74f3_firmware:-:::::::* cpe:2.3:o:amd:epyc_7513_firmware:-:::::::* cpe:2.3:o:amd:epyc_7543_firmware:-:::::::* cpe:2.3:o:amd:epyc_7573x_firmware:-:::::::* cpe:2.3:o:amd:epyc_75f3_firmware:-:::::::* cpe:2.3:o:amd:epyc_7643_firmware:-:::::::* cpe:2.3:o:amd:epyc_7643p_firmware:-:::::::* cpe:2.3:o:amd:epyc_7663_firmware:-:::::::* cpe:2.3:o:amd:epyc_7663p_firmware:-:::::::* cpe:2.3:o:amd:epyc_7713_firmware:-:::::::* cpe:2.3:o:amd:epyc_7713p_firmware:-:::::::* cpe:2.3:o:amd:epyc_7763_firmware:-:::::::* cpe:2.3:o:amd:epyc_7773x_firmware:-:::::::*
amd	epyc_9754s_firmware	Affected: 0 , < genoapi_1.0.0.8 (custom) cpe:2.3:o:amd:epyc_8024p_firmware:-:::::::* cpe:2.3:o:amd:epyc_8024pn_firmware:-:::::::* cpe:2.3:o:amd:epyc_8124p_firmware:-:::::::* cpe:2.3:o:amd:epyc_8124pn_firmware:-:::::::* cpe:2.3:o:amd:epyc_8224p_firmware:-:::::::* cpe:2.3:o:amd:epyc_8224pn_firmware:-:::::::* cpe:2.3:o:amd:epyc_8324p_firmware:-:::::::* cpe:2.3:o:amd:epyc_8324pn_firmware:-:::::::* cpe:2.3:o:amd:epyc_8434p_firmware:-:::::::* cpe:2.3:o:amd:epyc_8434pn_firmware:-:::::::* cpe:2.3:o:amd:epyc_8534p_firmware:-:::::::* cpe:2.3:o:amd:epyc_8534pn_firmware:-:::::::* cpe:2.3:o:amd:epyc_9124_firmware:-:::::::* cpe:2.3:o:amd:epyc_9174f_firmware:-:::::::* cpe:2.3:o:amd:epyc_9184x_firmware:-:::::::* cpe:2.3:o:amd:epyc_9224_firmware:-:::::::* cpe:2.3:o:amd:epyc_9254_firmware:-:::::::* cpe:2.3:o:amd:epyc_9274f_firmware:-:::::::* cpe:2.3:o:amd:epyc_9334_firmware:-:::::::* cpe:2.3:o:amd:epyc_9354_firmware:-:::::::* cpe:2.3:o:amd:epyc_9354p_firmware:-:::::::* cpe:2.3:o:amd:epyc_9374f_firmware:-:::::::* cpe:2.3:o:amd:epyc_9384x_firmware:-:::::::* cpe:2.3:o:amd:epyc_9454_firmware:-:::::::* cpe:2.3:o:amd:epyc_9454p_firmware:-:::::::* cpe:2.3:o:amd:epyc_9474f_firmware:-:::::::* cpe:2.3:o:amd:epyc_9534_firmware:-:::::::* cpe:2.3:o:amd:epyc_9554_firmware:-:::::::* cpe:2.3:o:amd:epyc_9554p_firmware:-:::::::* cpe:2.3:o:amd:epyc_9634_firmware:-:::::::* cpe:2.3:o:amd:epyc_9654_firmware:-:::::::* cpe:2.3:o:amd:epyc_9654p_firmware:-:::::::* cpe:2.3:o:amd:epyc_9684x_firmware:-:::::::* cpe:2.3:o:amd:epyc_9734_firmware:-:::::::* cpe:2.3:o:amd:epyc_9754_firmware:-:::::::* cpe:2.3:o:amd:epyc_9754s_firmware:-:::::::*

Date Public

2024-08-13 16:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:o:amd:epyc_7003_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "epyc_7003_firmware",
            "vendor": "amd",
            "versions": [
              {
                "lessThan": "milanpi_1.0.0.b",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:amd:epyc_9003_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "epyc_9003_firmware",
            "vendor": "amd",
            "versions": [
              {
                "lessThan": "genoapi_1.0.0.8",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:amd:epyc_7203_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_7203p_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_72f3_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_7303_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_7303p_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_7313p_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_7343_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_7373x_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_7413_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_7443_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_7443p_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_7453_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_7473x_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_74f3_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_7513_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_7543_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_7573x_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_75f3_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_7643_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_7643p_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_7663_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_7663p_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_7713_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_7713p_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_7763_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_7773x_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "epyc_7773x_firmware",
            "vendor": "amd",
            "versions": [
              {
                "lessThan": "milanpi_1.0.0.b",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:amd:epyc_8024p_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_8024pn_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_8124p_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_8124pn_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_8224p_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_8224pn_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_8324p_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_8324pn_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_8434p_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_8434pn_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_8534p_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_8534pn_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_9124_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_9174f_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_9184x_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_9224_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_9254_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_9274f_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_9334_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_9354_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_9354p_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_9374f_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_9384x_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_9454_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_9454p_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_9474f_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_9534_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_9554_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_9554p_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_9634_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_9654_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_9654p_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_9684x_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_9734_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_9754_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_9754s_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "epyc_9754s_firmware",
            "vendor": "amd",
            "versions": [
              {
                "lessThan": "genoapi_1.0.0.8",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-20591",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-08-14T13:13:17.696799Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-665",
                "description": "CWE-665 Improper Initialization",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-03-13T16:41:15.645Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "affected",
          "product": "AMD EPYC\u2122 7003  Series Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "MilanPI 1.0.0.B",
              "versionType": "PI"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD EPYC\u2122 9004 Series Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "Genoa 1.0.0.8"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD EPYC\u2122 Embedded 7003 Series Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "EmbMilanPI-SP3 1.0.0.7"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD EPYC\u2122 Embedded 9003 Series Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "EmbGenoaPI-SP5  1.0.0.3"
            }
          ]
        }
      ],
      "datePublic": "2024-08-13T16:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eImproper re-initialization of IOMMU during the DRTM event\nmay permit an untrusted platform configuration to persist, allowing an attacker\nto read or modify hypervisor memory, potentially resulting in loss of\nconfidentiality, integrity, and availability.\n\n\n\n\n\n\n\n\u003cdiv\u003e\u003cdiv\u003e\u003cdiv\u003e\n\n\u003c/div\u003e\n\n\u003c/div\u003e\n\n\u003c/div\u003e\n\n\n\n\n\n\u003c/span\u003e"
            }
          ],
          "value": "Improper re-initialization of IOMMU during the DRTM event\nmay permit an untrusted platform configuration to persist, allowing an attacker\nto read or modify hypervisor memory, potentially resulting in loss of\nconfidentiality, integrity, and availability."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-08-13T16:53:23.681Z",
        "orgId": "b58fc414-a1e4-4f92-9d70-1add41838648",
        "shortName": "AMD"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3003.html"
        }
      ],
      "source": {
        "advisory": "AMD-SB-4002, AMD-SB-3002, AMD-SB-5001",
        "discovery": "UNKNOWN"
      },
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "b58fc414-a1e4-4f92-9d70-1add41838648",
    "assignerShortName": "AMD",
    "cveId": "CVE-2023-20591",
    "datePublished": "2024-08-13T16:53:23.681Z",
    "dateReserved": "2022-10-27T18:53:39.761Z",
    "dateUpdated": "2025-03-13T16:41:15.645Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-21980 (GCVE-0-2024-21980)

Vulnerability from cvelistv5 – Published: 2024-08-05 16:06 – Updated: 2024-08-05 21:00

Summary

Improper restriction of write operations in SNP firmware could allow a malicious hypervisor to potentially overwrite a guest's memory or UMC seed resulting in loss of confidentiality and integrity.

Severity

7.9 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-08-05 20:52 UTC

CWE

CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer

Assigner

AMD mitre root

References

1 reference

URL	Tags
https://https://www.amd.com/en/resources/product-…	vendor-advisory

Impacted products

8 products

Vendor	Product	Version
AMD	3rd Gen AMD EPYC™ Processors	Affected: various , < MilanPI 1.0.0.D (Platform Initialization)
AMD	4th Gen AMD EPYC™ Processors	Affected: various , < GenoaPI 1.0.0.C (Platform Initialization)
AMD	AMD EPYC™ Embedded 7003	Affected: various , < EmbMilanPI-SP3 1.0.0.9 (Platform Initialization)
AMD	AMD EPYC™ Embedded 9003	Affected: various , < EmbGenoaPI-SP5 1.0.0.7 (Platform Initialization)
amd	epyc_7003_firmware	Affected: 0 , < milanpi_1.0.0.9_sp3 (custom) cpe:2.3:o:amd:epyc_7003_firmware::::::::
amd	epyc_9003_firmware	Affected: 0 , < genoapi_1.0.0.7_sp5 (custom) cpe:2.3:o:amd:epyc_9003_firmware::::::::
amd	epyc_7773x_firmware	Affected: 0 , < milanpi_1.0.0.d (custom) cpe:2.3:o:amd:epyc_7203_firmware:-:::::::* cpe:2.3:o:amd:epyc_7203p_firmware:-:::::::* cpe:2.3:o:amd:epyc_72f3_firmware:-:::::::* cpe:2.3:o:amd:epyc_7303_firmware:-:::::::* cpe:2.3:o:amd:epyc_7303p_firmware:-:::::::* cpe:2.3:o:amd:epyc_7313p_firmware:-:::::::* cpe:2.3:o:amd:epyc_7343_firmware:-:::::::* cpe:2.3:o:amd:epyc_7373x_firmware:-:::::::* cpe:2.3:o:amd:epyc_7413_firmware:-:::::::* cpe:2.3:o:amd:epyc_7443_firmware:-:::::::* cpe:2.3:o:amd:epyc_7443p_firmware:-:::::::* cpe:2.3:o:amd:epyc_7453_firmware:-:::::::* cpe:2.3:o:amd:epyc_7473x_firmware:-:::::::* cpe:2.3:o:amd:epyc_74f3_firmware:-:::::::* cpe:2.3:o:amd:epyc_7513_firmware:-:::::::* cpe:2.3:o:amd:epyc_7543_firmware:-:::::::* cpe:2.3:o:amd:epyc_7573x_firmware:-:::::::* cpe:2.3:o:amd:epyc_75f3_firmware:-:::::::* cpe:2.3:o:amd:epyc_7643_firmware:-:::::::* cpe:2.3:o:amd:epyc_7643p_firmware:-:::::::* cpe:2.3:o:amd:epyc_7663_firmware:-:::::::* cpe:2.3:o:amd:epyc_7663p_firmware:-:::::::* cpe:2.3:o:amd:epyc_7713_firmware:-:::::::* cpe:2.3:o:amd:epyc_7713p_firmware:-:::::::* cpe:2.3:o:amd:epyc_7763_firmware:-:::::::* cpe:2.3:o:amd:epyc_7773x_firmware:-:::::::*
amd	epyc_9754s_firmware	Affected: 0 , < genoapi_1.0.0.c (custom) cpe:2.3:o:amd:epyc_8024p_firmware:-:::::::* cpe:2.3:o:amd:epyc_8024pn_firmware:-:::::::* cpe:2.3:o:amd:epyc_8124p_firmware:-:::::::* cpe:2.3:o:amd:epyc_8124pn_firmware:-:::::::* cpe:2.3:o:amd:epyc_8224p_firmware:-:::::::* cpe:2.3:o:amd:epyc_8224pn_firmware:-:::::::* cpe:2.3:o:amd:epyc_8324p_firmware:-:::::::* cpe:2.3:o:amd:epyc_8324pn_firmware:-:::::::* cpe:2.3:o:amd:epyc_8434p_firmware:-:::::::* cpe:2.3:o:amd:epyc_8434pn_firmware:-:::::::* cpe:2.3:o:amd:epyc_8534p_firmware:-:::::::* cpe:2.3:o:amd:epyc_8534pn_firmware:-:::::::* cpe:2.3:o:amd:epyc_9124_firmware:-:::::::* cpe:2.3:o:amd:epyc_9174f_firmware:-:::::::* cpe:2.3:o:amd:epyc_9184x_firmware:-:::::::* cpe:2.3:o:amd:epyc_9224_firmware:-:::::::* cpe:2.3:o:amd:epyc_9254_firmware:-:::::::* cpe:2.3:o:amd:epyc_9274f_firmware:-:::::::* cpe:2.3:o:amd:epyc_9334_firmware:-:::::::* cpe:2.3:o:amd:epyc_9354_firmware:-:::::::* cpe:2.3:o:amd:epyc_9354p_firmware:-:::::::* cpe:2.3:o:amd:epyc_9374f_firmware:-:::::::* cpe:2.3:o:amd:epyc_9384x_firmware:-:::::::* cpe:2.3:o:amd:epyc_9454_firmware:-:::::::* cpe:2.3:o:amd:epyc_9454p_firmware:-:::::::* cpe:2.3:o:amd:epyc_9474f_firmware:-:::::::* cpe:2.3:o:amd:epyc_9534_firmware:-:::::::* cpe:2.3:o:amd:epyc_9554_firmware:-:::::::* cpe:2.3:o:amd:epyc_9554p_firmware:-:::::::* cpe:2.3:o:amd:epyc_9634_firmware:-:::::::* cpe:2.3:o:amd:epyc_9654_firmware:-:::::::* cpe:2.3:o:amd:epyc_9654p_firmware:-:::::::* cpe:2.3:o:amd:epyc_9684x_firmware:-:::::::* cpe:2.3:o:amd:epyc_9734_firmware:-:::::::* cpe:2.3:o:amd:epyc_9754_firmware:-:::::::* cpe:2.3:o:amd:epyc_9754s_firmware:-:::::::*

Date Public

2024-08-05 16:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:o:amd:epyc_7003_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "epyc_7003_firmware",
            "vendor": "amd",
            "versions": [
              {
                "lessThan": "milanpi_1.0.0.9_sp3",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:amd:epyc_9003_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "epyc_9003_firmware",
            "vendor": "amd",
            "versions": [
              {
                "lessThan": "genoapi_1.0.0.7_sp5",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:amd:epyc_7203_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_7203p_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_72f3_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_7303_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_7303p_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_7313p_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_7343_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_7373x_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_7413_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_7443_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_7443p_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_7453_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_7473x_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_74f3_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_7513_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_7543_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_7573x_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_75f3_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_7643_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_7643p_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_7663_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_7663p_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_7713_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_7713p_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_7763_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_7773x_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "epyc_7773x_firmware",
            "vendor": "amd",
            "versions": [
              {
                "lessThan": "milanpi_1.0.0.d",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:amd:epyc_8024p_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_8024pn_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_8124p_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_8124pn_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_8224p_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_8224pn_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_8324p_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_8324pn_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_8434p_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_8434pn_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_8534p_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_8534pn_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_9124_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_9174f_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_9184x_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_9224_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_9254_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_9274f_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_9334_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_9354_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_9354p_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_9374f_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_9384x_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_9454_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_9454p_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_9474f_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_9534_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_9554_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_9554p_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_9634_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_9654_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_9654p_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_9684x_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_9734_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_9754_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_9754s_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "epyc_9754s_firmware",
            "vendor": "amd",
            "versions": [
              {
                "lessThan": "genoapi_1.0.0.c",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-21980",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-08-05T20:52:33.557459Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-08-05T21:00:57.665Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "affected",
          "product": "3rd Gen AMD EPYC\u2122 Processors",
          "vendor": "AMD",
          "versions": [
            {
              "lessThan": "MilanPI 1.0.0.D",
              "status": "affected",
              "version": "various",
              "versionType": "Platform Initialization"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "4th Gen AMD EPYC\u2122 Processors",
          "vendor": "AMD",
          "versions": [
            {
              "lessThan": "GenoaPI 1.0.0.C",
              "status": "affected",
              "version": "various",
              "versionType": "Platform Initialization"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD EPYC\u2122 Embedded 7003",
          "vendor": "AMD",
          "versions": [
            {
              "lessThan": "EmbMilanPI-SP3 1.0.0.9",
              "status": "affected",
              "version": "various",
              "versionType": "Platform Initialization"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD EPYC\u2122 Embedded 9003",
          "vendor": "AMD",
          "versions": [
            {
              "lessThan": "EmbGenoaPI-SP5 1.0.0.7",
              "status": "affected",
              "version": "various",
              "versionType": "Platform Initialization"
            }
          ]
        }
      ],
      "datePublic": "2024-08-05T16:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003e\n\n\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eImproper restriction of write operations in SNP firmware could allow a malicious hypervisor to potentially overwrite a guest\u0027s memory or UMC seed resulting in loss of confidentiality and integrity.\u003c/span\u003e\n\n\u003c/span\u003e"
            }
          ],
          "value": "Improper restriction of write operations in SNP firmware could allow a malicious hypervisor to potentially overwrite a guest\u0027s memory or UMC seed resulting in loss of confidentiality and integrity."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 7.9,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-119",
              "description": "CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-08-05T16:06:36.216Z",
        "orgId": "b58fc414-a1e4-4f92-9d70-1add41838648",
        "shortName": "AMD"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3011.html"
        }
      ],
      "source": {
        "advisory": "AMD-SB-4002, AMD-SB-3002, AMD-SB-5001",
        "discovery": "UNKNOWN"
      },
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "b58fc414-a1e4-4f92-9d70-1add41838648",
    "assignerShortName": "AMD",
    "cveId": "CVE-2024-21980",
    "datePublished": "2024-08-05T16:06:36.216Z",
    "dateReserved": "2024-01-03T16:43:30.197Z",
    "dateUpdated": "2024-08-05T21:00:57.665Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-21978 (GCVE-0-2024-21978)

Vulnerability from cvelistv5 – Published: 2024-08-05 16:05 – Updated: 2024-08-05 17:36

Summary

Improper input validation in SEV-SNP could allow a malicious hypervisor to read or overwrite guest memory potentially leading to data leakage or data corruption.

Severity

6 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-08-05 17:01 UTC

CWE

CWE-20 - Improper Input Validation

Assigner

AMD mitre root

References

1 reference

URL	Tags
https://https://www.amd.com/en/resources/product-…	vendor-advisory

Impacted products

8 products

Vendor	Product	Version
AMD	3rd Gen AMD EPYC™ Processors	Affected: various , < MilanPI 1.0.0.D (Platform Initialization)
AMD	4th Gen AMD EPYC™ Processors	Affected: various , < GenoaPI 1.0.0.C (Platform Initialization)
AMD	AMD EPYC™ Embedded 7003	Affected: various , < EmbMilanPI-SP3 1.0.0.9 (Platform Initialization)
AMD	AMD EPYC™ Embedded 9003	Affected: various , < EmbGenoaPI-SP5 1.0.0.7 (Platform Initialization)
amd	epyc_7003_firmware	Affected: 0 , < milanpi_1.0.0.9_sp3 (custom) cpe:2.3:o:amd:epyc_7003_firmware::::::::
amd	epyc_9003_firmware	Affected: 0 , < genoapi_1.0.0.7_sp5 (custom) cpe:2.3:o:amd:epyc_9003_firmware::::::::
amd	epyc_7773x_firmware	Affected: 0 , < milanpi_1.0.0.d (custom) cpe:2.3:o:amd:epyc_7203_firmware:-:::::::* cpe:2.3:o:amd:epyc_7203p_firmware:-:::::::* cpe:2.3:o:amd:epyc_72f3_firmware:-:::::::* cpe:2.3:o:amd:epyc_7303_firmware:-:::::::* cpe:2.3:o:amd:epyc_7303p_firmware:-:::::::* cpe:2.3:o:amd:epyc_7313p_firmware:-:::::::* cpe:2.3:o:amd:epyc_7343_firmware:-:::::::* cpe:2.3:o:amd:epyc_7373x_firmware:-:::::::* cpe:2.3:o:amd:epyc_7413_firmware:-:::::::* cpe:2.3:o:amd:epyc_7443_firmware:-:::::::* cpe:2.3:o:amd:epyc_7443p_firmware:-:::::::* cpe:2.3:o:amd:epyc_7453_firmware:-:::::::* cpe:2.3:o:amd:epyc_7473x_firmware:-:::::::* cpe:2.3:o:amd:epyc_74f3_firmware:-:::::::* cpe:2.3:o:amd:epyc_7513_firmware:-:::::::* cpe:2.3:o:amd:epyc_7543_firmware:-:::::::* cpe:2.3:o:amd:epyc_7573x_firmware:-:::::::* cpe:2.3:o:amd:epyc_75f3_firmware:-:::::::* cpe:2.3:o:amd:epyc_7643_firmware:-:::::::* cpe:2.3:o:amd:epyc_7643p_firmware:-:::::::* cpe:2.3:o:amd:epyc_7663_firmware:-:::::::* cpe:2.3:o:amd:epyc_7663p_firmware:-:::::::* cpe:2.3:o:amd:epyc_7713_firmware:-:::::::* cpe:2.3:o:amd:epyc_7713p_firmware:-:::::::* cpe:2.3:o:amd:epyc_7763_firmware:-:::::::* cpe:2.3:o:amd:epyc_7773x_firmware:-:::::::*
amd	epyc_9754s_firmware	Affected: 0 , < genoapi_1.0.0.c (custom) cpe:2.3:o:amd:epyc_8024p_firmware:-:::::::* cpe:2.3:o:amd:epyc_8024pn_firmware:-:::::::* cpe:2.3:o:amd:epyc_8124p_firmware:-:::::::* cpe:2.3:o:amd:epyc_8124pn_firmware:-:::::::* cpe:2.3:o:amd:epyc_8224p_firmware:-:::::::* cpe:2.3:o:amd:epyc_8224pn_firmware:-:::::::* cpe:2.3:o:amd:epyc_8324p_firmware:-:::::::* cpe:2.3:o:amd:epyc_8324pn_firmware:-:::::::* cpe:2.3:o:amd:epyc_8434p_firmware:-:::::::* cpe:2.3:o:amd:epyc_8434pn_firmware:-:::::::* cpe:2.3:o:amd:epyc_8534p_firmware:-:::::::* cpe:2.3:o:amd:epyc_8534pn_firmware:-:::::::* cpe:2.3:o:amd:epyc_9124_firmware:-:::::::* cpe:2.3:o:amd:epyc_9174f_firmware:-:::::::* cpe:2.3:o:amd:epyc_9184x_firmware:-:::::::* cpe:2.3:o:amd:epyc_9224_firmware:-:::::::* cpe:2.3:o:amd:epyc_9254_firmware:-:::::::* cpe:2.3:o:amd:epyc_9274f_firmware:-:::::::* cpe:2.3:o:amd:epyc_9334_firmware:-:::::::* cpe:2.3:o:amd:epyc_9354_firmware:-:::::::* cpe:2.3:o:amd:epyc_9354p_firmware:-:::::::* cpe:2.3:o:amd:epyc_9374f_firmware:-:::::::* cpe:2.3:o:amd:epyc_9384x_firmware:-:::::::* cpe:2.3:o:amd:epyc_9454_firmware:-:::::::* cpe:2.3:o:amd:epyc_9454p_firmware:-:::::::* cpe:2.3:o:amd:epyc_9474f_firmware:-:::::::* cpe:2.3:o:amd:epyc_9534_firmware:-:::::::* cpe:2.3:o:amd:epyc_9554_firmware:-:::::::* cpe:2.3:o:amd:epyc_9554p_firmware:-:::::::* cpe:2.3:o:amd:epyc_9634_firmware:-:::::::* cpe:2.3:o:amd:epyc_9654_firmware:-:::::::* cpe:2.3:o:amd:epyc_9654p_firmware:-:::::::* cpe:2.3:o:amd:epyc_9684x_firmware:-:::::::* cpe:2.3:o:amd:epyc_9734_firmware:-:::::::* cpe:2.3:o:amd:epyc_9754_firmware:-:::::::* cpe:2.3:o:amd:epyc_9754s_firmware:-:::::::*

Date Public

2024-08-05 16:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:o:amd:epyc_7003_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "epyc_7003_firmware",
            "vendor": "amd",
            "versions": [
              {
                "lessThan": "milanpi_1.0.0.9_sp3",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:amd:epyc_9003_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "epyc_9003_firmware",
            "vendor": "amd",
            "versions": [
              {
                "lessThan": "genoapi_1.0.0.7_sp5",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:amd:epyc_7203_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_7203p_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_72f3_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_7303_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_7303p_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_7313p_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_7343_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_7373x_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_7413_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_7443_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_7443p_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_7453_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_7473x_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_74f3_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_7513_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_7543_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_7573x_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_75f3_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_7643_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_7643p_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_7663_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_7663p_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_7713_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_7713p_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_7763_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_7773x_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "epyc_7773x_firmware",
            "vendor": "amd",
            "versions": [
              {
                "lessThan": "milanpi_1.0.0.d",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:amd:epyc_8024p_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_8024pn_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_8124p_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_8124pn_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_8224p_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_8224pn_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_8324p_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_8324pn_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_8434p_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_8434pn_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_8534p_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_8534pn_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_9124_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_9174f_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_9184x_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_9224_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_9254_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_9274f_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_9334_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_9354_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_9354p_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_9374f_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_9384x_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_9454_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_9454p_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_9474f_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_9534_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_9554_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_9554p_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_9634_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_9654_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_9654p_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_9684x_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_9734_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_9754_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:epyc_9754s_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "epyc_9754s_firmware",
            "vendor": "amd",
            "versions": [
              {
                "lessThan": "genoapi_1.0.0.c",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-21978",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-08-05T17:01:18.171419Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-08-05T17:36:02.731Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "affected",
          "product": "3rd Gen AMD EPYC\u2122 Processors",
          "vendor": "AMD",
          "versions": [
            {
              "lessThan": "MilanPI 1.0.0.D",
              "status": "affected",
              "version": "various",
              "versionType": "Platform Initialization"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "4th Gen AMD EPYC\u2122 Processors",
          "vendor": "AMD",
          "versions": [
            {
              "lessThan": "GenoaPI 1.0.0.C",
              "status": "affected",
              "version": "various",
              "versionType": "Platform Initialization"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD EPYC\u2122 Embedded 7003",
          "vendor": "AMD",
          "versions": [
            {
              "lessThan": "EmbMilanPI-SP3 1.0.0.9",
              "status": "affected",
              "version": "various",
              "versionType": "Platform Initialization"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD EPYC\u2122 Embedded 9003",
          "vendor": "AMD",
          "versions": [
            {
              "lessThan": "EmbGenoaPI-SP5 1.0.0.7",
              "status": "affected",
              "version": "various",
              "versionType": "Platform Initialization"
            }
          ]
        }
      ],
      "datePublic": "2024-08-05T16:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003e\n\n\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003e\n\n\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eImproper input validation in SEV-SNP could allow a malicious hypervisor to read or overwrite guest memory potentially leading to data leakage or data corruption.\u003c/span\u003e\n\n\u003c/span\u003e\n\n\u003c/span\u003e"
            }
          ],
          "value": "Improper input validation in SEV-SNP could allow a malicious hypervisor to read or overwrite guest memory potentially leading to data leakage or data corruption."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 6,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-20",
              "description": "CWE-20 Improper Input Validation",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-08-05T16:05:34.019Z",
        "orgId": "b58fc414-a1e4-4f92-9d70-1add41838648",
        "shortName": "AMD"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3011.html"
        }
      ],
      "source": {
        "advisory": "AMD-SB-4002, AMD-SB-3002, AMD-SB-5001",
        "discovery": "UNKNOWN"
      },
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "b58fc414-a1e4-4f92-9d70-1add41838648",
    "assignerShortName": "AMD",
    "cveId": "CVE-2024-21978",
    "datePublished": "2024-08-05T16:05:34.019Z",
    "dateReserved": "2024-01-03T16:43:30.197Z",
    "dateUpdated": "2024-08-05T17:36:02.731Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Find a vulnerability

Search criteria

3 vulnerabilities found for epyc_7773x_firmware by amd

CVE-2023-20591 (GCVE-0-2023-20591)

CVE-2024-21980 (GCVE-0-2024-21980)

CVE-2024-21978 (GCVE-0-2024-21978)