AMD AMD Ryzen™ Threadripper™ PRO 5000WX- Series Desktop Processors

• CVE-2024-36348 Low 3.8 A transient execution vulnerability in some AMD processors may allow a user process to infer the control registers speculatively even if UMIP feature is enabled, potentially resulting in information l 0.3%
• CVE-2024-36349 Low 3.8 A transient execution vulnerability in some AMD processors may allow a user process to infer TSC_AUX even when such a read is disabled, potentially resulting in information leakage. 0.2%
• CVE-2024-36347 Medium 6.4 Improper signature verification in AMD CPU ROM microcode patch loader may allow an attacker with local administrator privilege to load malicious microcode, potentially resulting in loss of integrity o 0.1%
• CVE-2023-31345 High 7.5 Improper input validation in the SMM handler may allow a privileged attacker to overwrite SMRAM, potentially leading to arbitrary code execution. 0.2%
• CVE-2023-31343 High 7.5 Improper input validation in the SMM handler may allow a privileged attacker to overwrite SMRAM, potentially leading to arbitrary code execution. 0.2%
• CVE-2023-31342 High 7.5 Improper input validation in the SMM handler may allow a privileged attacker to overwrite SMRAM, potentially leading to arbitrary code execution. 0.2%
• CVE-2023-20515 Medium 5.7 Improper access control in the fTPM driver in the trusted OS could allow a privileged attacker to corrupt system memory, potentially leading to loss of integrity, confidentiality, or availability. 0.2%
• CVE-2024-21925 High 8.2 Improper input validation within the AmdPspP2CmboxV2 driver may allow a privileged attacker to overwrite SMRAM, leading to arbitrary code execution. 0.2%
• CVE-2024-21924 High 8.2 SMM callout vulnerability within the AmdPlatformRasSspSmm driver could allow a ring 0 attacker to modify boot services handlers, potentially resulting in arbitrary code execution. 0.2%