AMD Ryzen™ Threadripper™ PRO Processors “Castle Peak” WS SP3

• CVE-2022-23821 Unrated Improper access control in System Management Mode (SMM) may allow an attacker to write to SPI ROM potentially leading to arbitrary code execution. 1.0%
• CVE-2023-20597 Unrated Improper initialization of variables in the DXE driver may allow a privileged user to leak sensitive information via local access. 0.2%
• CVE-2023-20594 Unrated Improper initialization of variables in the DXE driver may allow a privileged user to leak sensitive information via local access. 0.2%
• CVE-2023-20593 Unrated An issue in “Zen 2” CPUs, under specific microarchitectural circumstances, may allow an attacker to potentially access sensitive information. 5.1%