Approved changes feed: RSS · Atom

cpe:2.3:o:amd:epyc_7351_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorAmd (98d20b84-a967-5733-a541-b702f55a9781)
ProductEpyc 7351 Firmware (edce6b92-cb7a-5dbc-8589-b1f5c34fdf91)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-20578 vulnerable 2026-06-08 05:52:45.134765 Details available
HIGH (7.5)
A TOCTOU (Time-Of-Check-Time-Of-Use) in SMM may allow an attacker with ring0 privileges and access to the BIOS menu or UEFI shell to modify the communications buffer potentially resulting in arbitrary code execution.
Published: 2024-08-13T16:52:58.457Z
Updated: 2025-03-18T20:03:43.905Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-20527 vulnerable 2026-06-08 05:52:43.443269 Details available
Improper syscall input validation in the ASP Bootloader may allow a privileged attacker to read memory out-of-bounds, potentially leading to a denial-of-service.
Published: 2023-01-10T20:57:02.034Z
Updated: 2025-04-07T15:47:00.818Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-20526 vulnerable 2026-06-08 05:52:43.421962 Details available
LOW (1.9)
Insufficient input validation in the ASP Bootloader may enable a privileged attacker with physical access to expose the contents of ASP memory potentially leading to a loss of confidentiality.
Published: 2023-11-14T18:52:41.992Z
Updated: 2024-08-02T09:05:36.942Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-20521 vulnerable 2026-06-08 05:52:43.257642 Details available
LOW (3.3)
TOCTOU in the ASP Bootloader may allow an attacker with physical access to tamper with SPI ROM records after memory content verification, potentially leading to loss of confidentiality or a denial of service.
Published: 2023-11-14T18:52:31.662Z
Updated: 2024-08-02T09:05:36.873Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-46774 vulnerable 2026-06-08 05:38:05.473807 Details available
MEDIUM (6.7)
Insufficient DRAM address validation in System Management Unit (SMU) may allow an attacker to read/write from/to an invalid DRAM address, potentially resulting in denial-of-service.
Published: 2023-11-14T18:52:11.012Z
Updated: 2024-10-11T18:07:59.642Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-26408 vulnerable 2026-06-08 05:30:44.530501 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-26403 vulnerable 2026-06-08 05:30:44.434271 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-26398 vulnerable 2026-06-08 05:30:44.359029 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-26371 vulnerable 2026-06-08 05:30:43.849040 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-26356 vulnerable 2026-06-08 05:30:43.606315 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-26342 vulnerable 2026-06-08 05:30:43.192408 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-26335 vulnerable 2026-06-08 05:30:42.825317 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-26331 vulnerable 2026-06-08 05:30:42.791924 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-26330 vulnerable 2026-06-08 05:30:42.773628 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-26329 vulnerable 2026-06-08 05:30:42.729859 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-26322 vulnerable 2026-06-08 05:30:42.584979 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-26321 vulnerable 2026-06-08 05:30:42.577800 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-26320 vulnerable 2026-06-08 05:30:42.568218 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-26312 vulnerable 2026-06-08 05:30:42.256373 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-12988 vulnerable 2026-06-08 05:18:00.129516 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-12954 vulnerable 2026-06-08 05:17:59.893864 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-12951 vulnerable 2026-06-08 05:17:59.868313 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-12944 vulnerable 2026-06-08 05:17:59.769262 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.