Approved changes feed: RSS · Atom

cpe:2.3:o:amd:epyc_7351p_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorAmd (98d20b84-a967-5733-a541-b702f55a9781)
ProductEpyc 7351P Firmware (2f5388b7-8ec4-55e9-b0cb-2c8ea9ca01e1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-20578 vulnerable 2026-06-08 05:52:45.134729 Details available
HIGH (7.5)
A TOCTOU (Time-Of-Check-Time-Of-Use) in SMM may allow an attacker with ring0 privileges and access to the BIOS menu or UEFI shell to modify the communications buffer potentially resulting in arbitrary code execution.
Published: 2024-08-13T16:52:58.457Z
Updated: 2025-03-18T20:03:43.905Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-20526 vulnerable 2026-06-08 05:52:43.421995 Details available
LOW (1.9)
Insufficient input validation in the ASP Bootloader may enable a privileged attacker with physical access to expose the contents of ASP memory potentially leading to a loss of confidentiality.
Published: 2023-11-14T18:52:41.992Z
Updated: 2024-08-02T09:05:36.942Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-20521 vulnerable 2026-06-08 05:52:43.258600 Details available
LOW (3.3)
TOCTOU in the ASP Bootloader may allow an attacker with physical access to tamper with SPI ROM records after memory content verification, potentially leading to loss of confidentiality or a denial of service.
Published: 2023-11-14T18:52:31.662Z
Updated: 2024-08-02T09:05:36.873Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-46774 vulnerable 2026-06-08 05:38:05.474949 Details available
MEDIUM (6.7)
Insufficient DRAM address validation in System Management Unit (SMU) may allow an attacker to read/write from/to an invalid DRAM address, potentially resulting in denial-of-service.
Published: 2023-11-14T18:52:11.012Z
Updated: 2024-10-11T18:07:59.642Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-26408 vulnerable 2026-06-08 05:30:44.530632 Details available
Insufficient validation of elliptic curve points in SEV-legacy firmware may compromise SEV-legacy guest migration potentially resulting in loss of guest's integrity or confidentiality.
Published: 2022-05-10T18:22:50.329Z
Updated: 2024-09-16T21:04:07.585Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-26403 vulnerable 2026-06-08 05:30:44.434411 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-26371 vulnerable 2026-06-08 05:30:43.849077 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-26356 vulnerable 2026-06-08 05:30:43.606446 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-26342 vulnerable 2026-06-08 05:30:43.192538 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-26335 vulnerable 2026-06-08 05:30:42.825525 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-26331 vulnerable 2026-06-08 05:30:42.792037 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-26330 vulnerable 2026-06-08 05:30:42.773756 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-26329 vulnerable 2026-06-08 05:30:42.729817 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-26322 vulnerable 2026-06-08 05:30:42.584851 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-26321 vulnerable 2026-06-08 05:30:42.577587 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-26320 vulnerable 2026-06-08 05:30:42.568067 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-26312 vulnerable 2026-06-08 05:30:42.255081 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-12988 vulnerable 2026-06-08 05:18:00.129552 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-12954 vulnerable 2026-06-08 05:17:59.893902 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-12951 vulnerable 2026-06-08 05:17:59.868398 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-12944 vulnerable 2026-06-08 05:17:59.767667 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.