milanpi.1.0.0.9

DATE	CVE	VULNERABILITY TITLE	RISK
2023-11-14	CVE-2023-20566	Unspecified vulnerability in AMD products Improper address validation in ASP with SNP enabled may potentially allow an attacker to compromise guest memory integrity. network low complexity amd	7.5
2023-11-14	CVE-2023-20592	Unspecified vulnerability in AMD products Improper or unexpected behavior of the INVD instruction in some AMD CPUs may allow an attacker with a malicious hypervisor to affect cache line write-back behavior of the CPU leading to a potential loss of guest virtual machine (VM) memory integrity. network low complexity amd	6.5
2023-08-08	CVE-2023-20569	Information Exposure Through Discrepancy vulnerability in multiple products A side channel vulnerability on some of the AMD CPUs may allow an attacker to influence the return address prediction. local high complexity fedoraproject debian amd microsoft CWE-203	4.7
2023-05-09	CVE-2021-46756	Improper Input Validation vulnerability in AMD products Insufficient validation of inputs in SVC_MAP_USER_STACK in the ASP (AMD Secure Processor) bootloader may allow an attacker with a malicious Uapp or ABL to send malformed or invalid syscall to the bootloader resulting in a potential denial of service and loss of integrity. network low complexity amd CWE-20 critical	9.1
2023-05-09	CVE-2021-46762	Improper Input Validation vulnerability in AMD products Insufficient input validation in the SMU may allow an attacker to corrupt SMU SRAM potentially leading to a loss of integrity or denial of service. network low complexity amd CWE-20 critical	9.1
2023-05-09	CVE-2021-46763	Out-of-bounds Write vulnerability in AMD products Insufficient input validation in the SMU may enable a privileged attacker to write beyond the intended bounds of a shared memory buffer potentially leading to a loss of integrity. network low complexity amd CWE-787	7.5
2023-05-09	CVE-2021-46764	Out-of-bounds Write vulnerability in AMD products Improper validation of DRAM addresses in SMU may allow an attacker to overwrite sensitive memory locations within the ASP potentially resulting in a denial of service. network low complexity amd CWE-787	7.5
2023-05-09	CVE-2021-46769	Improper Input Validation vulnerability in AMD products Insufficient syscall input validation in the ASP Bootloader may allow a privileged attacker to execute arbitrary DMA copies, which can lead to code execution. network low complexity amd CWE-20	8.8
2023-05-09	CVE-2021-46775	Improper Input Validation vulnerability in AMD products Improper input validation in ABL may enable an attacker with physical access, to perform arbitrary memory overwrites, potentially leading to a loss of integrity and code execution. low complexity amd CWE-20	6.8
2023-05-09	CVE-2022-23818	Improper Input Validation vulnerability in AMD products Insufficient input validation on the model specific register: VM_HSAVE_PA may potentially lead to loss of SEV-SNP guest memory integrity. network low complexity amd CWE-20	7.5