Vulnerabilities > AMD > Epyc Embedded 3251 Firmware

DATE CVE VULNERABILITY TITLE RISK
2023-07-11 CVE-2023-20575 Information Exposure Through Discrepancy vulnerability in AMD products
A potential power side-channel vulnerability in some AMD processors may allow an authenticated attacker to use the power reporting functionality to monitor a program’s execution inside an AMD SEV VM potentially resulting in a leak of sensitive information.
network
low complexity
amd CWE-203
6.5
2023-03-01 CVE-2022-27672 Unspecified vulnerability in AMD products
When SMT is enabled, certain AMD processors may speculatively execute instructions using a target from the sibling thread after an SMT mode switch potentially resulting in information disclosure.
local
high complexity
amd
4.7
2022-05-11 CVE-2021-46744 Information Exposure Through Discrepancy vulnerability in AMD products
An attacker with access to a malicious hypervisor may be able to infer data values used in a SEV guest on AMD CPUs by monitoring ciphertext values over time.
local
low complexity
amd CWE-203
6.5
2022-02-04 CVE-2020-12966 Information Exposure vulnerability in AMD products
AMD EPYC™ Processors contain an information disclosure vulnerability in the Secure Encrypted Virtualization with Encrypted State (SEV-ES) and Secure Encrypted Virtualization with Secure Nested Paging (SEV-SNP).
local
low complexity
amd CWE-200
5.5
2021-12-10 CVE-2021-26340 Unspecified vulnerability in AMD products
A malicious hypervisor in conjunction with an unprivileged attacker process inside an SEV/SEV-ES guest VM may fail to flush the Translation Lookaside Buffer (TLB) resulting in unexpected behavior inside the virtual machine (VM).
local
low complexity
amd
8.4