AMD AMD EPYC™ Embedded 9004

• CVE-2024-36347 Medium 6.4 Improper signature verification in AMD CPU ROM microcode patch loader may allow an attacker with local administrator privilege to load malicious microcode, potentially resulting in loss of integrity o 0.1%
• CVE-2023-31345 High 7.5 Improper input validation in the SMM handler may allow a privileged attacker to overwrite SMRAM, potentially leading to arbitrary code execution. 0.2%
• CVE-2023-31352 Medium 6.0 A bug in the SEV firmware may allow an attacker with privileges to read unencrypted memory, potentially resulting in loss of guest private data. 0.2%
• CVE-2023-31343 High 7.5 Improper input validation in the SMM handler may allow a privileged attacker to overwrite SMRAM, potentially leading to arbitrary code execution. 0.2%
• CVE-2023-31342 High 7.5 Improper input validation in the SMM handler may allow a privileged attacker to overwrite SMRAM, potentially leading to arbitrary code execution. 0.2%
• CVE-2023-20582 Medium 5.3 Improper handling of invalid nested page table entries in the IOMMU may allow a privileged attacker to induce page table entry (PTE) faults to bypass RMP checks in SEV-SNP, potentially leading to a lo 0.2%
• CVE-2023-20581 Low 2.5 Improper access control in the IOMMU may allow a privileged attacker to bypass RMP checks, potentially leading to a loss of guest memory integrity. 0.2%
• CVE-2024-21925 High 8.2 Improper input validation within the AmdPspP2CmboxV2 driver may allow a privileged attacker to overwrite SMRAM, leading to arbitrary code execution. 0.2%
• CVE-2023-31356 Medium 4.4 Incomplete system memory cleanup in SEV firmware could allow a privileged attacker to corrupt guest private memory, potentially resulting in a loss of data integrity. 0.2%