GCVE - cpe:2.3:o:amd:epyc_9554p_firmware:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:amd:epyc_9554p_firmware:-:*:*:*:*:*:*:*

part: o version: - update: *

Vendor	Amd (`98d20b84-a967-5733-a541-b702f55a9781`)
Product	Epyc 9554P Firmware (`1c8572a3-d1bb-5676-9006-3fe2732c8290`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-21980`	vulnerable	2026-06-08 06:29:33.076268	Details available HIGH (7.9) Improper restriction of write operations in SNP firmware could allow a malicious hypervisor to potentially overwrite a guest's memory or UMC seed resulting in loss of confidentiality and integrity. Published: 2024-08-05T16:06:36.216Z Updated: 2024-08-05T21:00:57.665Z Open on db.gcve.eu Reference links https://https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3011.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-21978`	vulnerable	2026-06-08 06:29:32.877521	Details available MEDIUM (6) Improper input validation in SEV-SNP could allow a malicious hypervisor to read or overwrite guest memory potentially leading to data leakage or data corruption. Published: 2024-08-05T16:05:34.019Z Updated: 2024-08-05T17:36:02.731Z Open on db.gcve.eu Reference links https://https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3011.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-20591`	vulnerable	2026-06-08 05:52:45.374289	Details available MEDIUM (6.5) Improper re-initialization of IOMMU during the DRTM event may permit an untrusted platform configuration to persist, allowing an attacker to read or modify hypervisor memory, potentially resulting in loss of confidentiality, integrity, and availability. Published: 2024-08-13T16:53:23.681Z Updated: 2025-03-13T16:41:15.645Z Open on db.gcve.eu Reference links https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3003.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-20575`	vulnerable	2026-06-08 05:52:45.108020	Details available A potential power side-channel vulnerability in some AMD processors may allow an authenticated attacker to use the power reporting functionality to monitor a program’s execution inside an AMD SEV VM potentially resulting in a leak of sensitive information. Published: 2023-07-11T18:29:02.607Z Updated: 2024-11-27T16:01:14.610Z Open on db.gcve.eu Reference links https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3004	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-20573`	vulnerable	2026-06-08 05:52:45.037710	Debug Exception Delivery in Secure Nested Paging A privileged attacker can prevent delivery of debug exceptions to SEV-SNP guests potentially resulting in guests not receiving expected debug information. Published: 2024-01-11T13:53:52.581Z Updated: 2025-06-20T16:12:15.413Z Open on db.gcve.eu Reference links https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3006	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.