Approved changes feed: RSS · Atom

cpe:2.3:o:amd:epyc_7601_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorAmd (98d20b84-a967-5733-a541-b702f55a9781)
ProductEpyc 7601 Firmware (ccaaa89f-f4c1-59de-b1ce-6d98bc4bbcbc)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-20578 vulnerable 2026-06-08 05:52:45.134459 Details available
HIGH (7.5)
A TOCTOU (Time-Of-Check-Time-Of-Use) in SMM may allow an attacker with ring0 privileges and access to the BIOS menu or UEFI shell to modify the communications buffer potentially resulting in arbitrary code execution.
Published: 2024-08-13T16:52:58.457Z
Updated: 2025-03-18T20:03:43.905Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-20527 vulnerable 2026-06-08 05:52:43.443702 Details available
Improper syscall input validation in the ASP Bootloader may allow a privileged attacker to read memory out-of-bounds, potentially leading to a denial-of-service.
Published: 2023-01-10T20:57:02.034Z
Updated: 2025-04-07T15:47:00.818Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-20526 vulnerable 2026-06-08 05:52:43.422450 Details available
LOW (1.9)
Insufficient input validation in the ASP Bootloader may enable a privileged attacker with physical access to expose the contents of ASP memory potentially leading to a loss of confidentiality.
Published: 2023-11-14T18:52:41.992Z
Updated: 2024-08-02T09:05:36.942Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-20521 vulnerable 2026-06-08 05:52:43.265829 Details available
LOW (3.3)
TOCTOU in the ASP Bootloader may allow an attacker with physical access to tamper with SPI ROM records after memory content verification, potentially leading to loss of confidentiality or a denial of service.
Published: 2023-11-14T18:52:31.662Z
Updated: 2024-08-02T09:05:36.873Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-46774 vulnerable 2026-06-08 05:38:05.485129 Details available
MEDIUM (6.7)
Insufficient DRAM address validation in System Management Unit (SMU) may allow an attacker to read/write from/to an invalid DRAM address, potentially resulting in denial-of-service.
Published: 2023-11-14T18:52:11.012Z
Updated: 2024-10-11T18:07:59.642Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-26408 vulnerable 2026-06-08 05:30:44.531132 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-26403 vulnerable 2026-06-08 05:30:44.434866 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-26398 vulnerable 2026-06-08 05:30:44.359723 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-26371 vulnerable 2026-06-08 05:30:43.849693 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-26356 vulnerable 2026-06-08 05:30:43.607229 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-26342 vulnerable 2026-06-08 05:30:43.193539 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-26335 vulnerable 2026-06-08 05:30:42.826473 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-26331 vulnerable 2026-06-08 05:30:42.792696 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-26330 vulnerable 2026-06-08 05:30:42.784833 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-26329 vulnerable 2026-06-08 05:30:42.729005 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-26322 vulnerable 2026-06-08 05:30:42.584285 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-26321 vulnerable 2026-06-08 05:30:42.576890 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-26320 vulnerable 2026-06-08 05:30:42.567371 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-26312 vulnerable 2026-06-08 05:30:42.247859 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-12988 vulnerable 2026-06-08 05:18:00.131390 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-12954 vulnerable 2026-06-08 05:17:59.900931 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-12951 vulnerable 2026-06-08 05:17:59.883417 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-12944 vulnerable 2026-06-08 05:17:59.759748 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.