Milanpi Firmware
by AMD
CVEs (7)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2021-26409 | Hig | 0.51 | 7.8 | 0.00 | Jan 11, 2023 | Insufficient bounds checking in SEV-ES may allow an attacker to corrupt Reverse Map table (RMP) memory, potentially resulting in a loss of SNP (Secure Nested Paging) memory integrity. | ||
| CVE-2023-20522 | Hig | 0.49 | 7.5 | 0.01 | Jan 11, 2023 | Insufficient input validation in ASP may allow an attacker with a malicious BIOS to potentially cause a denial of service. | ||
| CVE-2021-46779 | Hig | 0.46 | 7.1 | 0.00 | Jan 11, 2023 | Insufficient input validation in SVC_ECC_PRIMITIVE system call in a compromised user application or ABL may allow an attacker to corrupt ASP (AMD Secure Processor) OS memory which may lead to potential loss of integrity and availability. | ||
| CVE-2021-46767 | Med | 0.40 | 6.1 | 0.00 | Jan 11, 2023 | Insufficient input validation in the ASP may allow an attacker with physical access, unauthorized write access to memory potentially leading to a loss of integrity or denial of service. | ||
| CVE-2021-46791 | Med | 0.36 | 5.5 | 0.00 | Jan 11, 2023 | Insufficient input validation during parsing of the System Management Mode (SMM) binary may allow a maliciously crafted SMM executable binary to corrupt Dynamic Root of Trust for Measurement (DRTM) user application memory that may result in a potential denial of service. | ||
| CVE-2021-46768 | Med | 0.36 | 5.5 | 0.00 | Jan 11, 2023 | Insufficient input validation in SEV firmware may allow an attacker to perform out-of-bounds memory reads within the ASP boot loader, potentially leading to a denial of service. | ||
| CVE-2023-20519 | Low | 0.21 | 3.3 | 0.00 | Nov 14, 2023 | A Use-After-Free vulnerability in the management of an SNP guest context page may allow a malicious hypervisor to masquerade as the guest's migration agent resulting in a potential loss of guest integrity. |
- risk 0.51cvss 7.8epss 0.00
Insufficient bounds checking in SEV-ES may allow an attacker to corrupt Reverse Map table (RMP) memory, potentially resulting in a loss of SNP (Secure Nested Paging) memory integrity.
- risk 0.49cvss 7.5epss 0.01
Insufficient input validation in ASP may allow an attacker with a malicious BIOS to potentially cause a denial of service.
- risk 0.46cvss 7.1epss 0.00
Insufficient input validation in SVC_ECC_PRIMITIVE system call in a compromised user application or ABL may allow an attacker to corrupt ASP (AMD Secure Processor) OS memory which may lead to potential loss of integrity and availability.
- risk 0.40cvss 6.1epss 0.00
Insufficient input validation in the ASP may allow an attacker with physical access, unauthorized write access to memory potentially leading to a loss of integrity or denial of service.
- risk 0.36cvss 5.5epss 0.00
Insufficient input validation during parsing of the System Management Mode (SMM) binary may allow a maliciously crafted SMM executable binary to corrupt Dynamic Root of Trust for Measurement (DRTM) user application memory that may result in a potential denial of service.
- risk 0.36cvss 5.5epss 0.00
Insufficient input validation in SEV firmware may allow an attacker to perform out-of-bounds memory reads within the ASP boot loader, potentially leading to a denial of service.
- risk 0.21cvss 3.3epss 0.00
A Use-After-Free vulnerability in the management of an SNP guest context page may allow a malicious hypervisor to masquerade as the guest's migration agent resulting in a potential loss of guest integrity.