AMD 1st Gen AMD Epyc Processors vulnerabilities

3 CVEs affecting AMD 1st Gen AMD Epyc Processors, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-31315, published 2024-08-12.

More from AMD.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2023-31315, published 2024-08-12. High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days. Improper validation in a model specific register (MSR) could allow a malicious program with ring0 access to modify SMM configuration while SMI lock is enabled, potentially leading to arbitrary code…
• CVE-2022-23829, published 2024-06-18. High severity, CVSS 8.2. EPSS: 0.2% chance of exploitation in the next 30 days. A potential weakness in AMD SPI protection features may allow a malicious attacker with Ring0 (kernel mode) access to bypass the native System Management Mode (SMM) ROM protections.
• CVE-2023-20587, published 2024-02-13. High severity, CVSS 7.1. EPSS: 0.2% chance of exploitation in the next 30 days. Improper Access Control in System Management Mode (SMM) may allow an attacker access to the SPI flash potentially leading to arbitrary code execution.