Advisories · Technology
AMD Ryzen™ Threadripper™ PRO 5000WX- Series Desktop Processors.
Every CVE that names AMD Ryzen™ Threadripper™ PRO 5000WX- Series Desktop Processors among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 3.8 Low
A transient execution vulnerability in some AMD processors may allow a user process to infer the control registers speculatively even if UMIP feature is enabled, potentially resulting in information…
- AMD EPYC™ 7002 Series Processors
- AMD EPYC™ 7003 Series Processors
- CWE-1420
- CVSS 3.8 Low
A transient execution vulnerability in some AMD processors may allow a user process to infer TSC_AUX even when such a read is disabled, potentially resulting in information leakage.
- AMD EPYC™ 7002 Series Processors
- AMD EPYC™ 7003 Series Processors
- CWE-1420
- CVSS 6.4 Medium
Improper signature verification in AMD EPYC™ 7001 Series and others
- AMD EPYC™ 7001 Series
- AMD EPYC™ 7002 Series
- Weak cryptography or TLS
- CVSS 7.5 High
Improper input validation in the SMM handler may allow a privileged attacker to overwrite SMRAM, potentially leading to arbitrary code execution.
- AMD EPYC™ 7003 Processors
- AMD EPYC™ 9004 Processors
- CWE-1274
- CVSS 7.5 High
Improper input validation in the SMM handler may allow a privileged attacker to overwrite SMRAM, potentially leading to arbitrary code execution.
- AMD EPYC™ 7003 Processors
- AMD EPYC™ 9004 Processors
- CWE-1220
- CVSS 7.5 High
Improper input validation in the SMM handler may allow a privileged attacker to overwrite SMRAM, potentially leading to arbitrary code execution.
- AMD EPYC™ 7003 Processors
- AMD EPYC™ 9004 Processors
- CWE-1220
- CVSS 5.7 Medium
Improper access control in the fTPM driver in the trusted OS could allow a privileged attacker to corrupt system memory, potentially leading to loss of integrity, confidentiality, or availability.
- AMD Ryzen™ 3000 Series Desktop Processors
- AMD Ryzen™ 5000 Series Desktop Processors
- CWE-1284
- CVSS 8.2 High
Improper input validation in AMD EPYC™ 7001 Processors and others
- AMD EPYC™ 7001 Processors
- AMD EPYC™ 7002 Processors
- CWE-20
- CVSS 8.2 High
Execution with unnecessary privileges in AMD EPYC™ 7002 Processors and others
- AMD EPYC™ 7002 Processors
- AMD Ryzen™ Threadripper™ PRO 3000WX Series Processors
- Privilege escalation