Approved changes feed: RSS · Atom

cpe:2.3:o:amd:epyc_7281_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorAmd (98d20b84-a967-5733-a541-b702f55a9781)
ProductEpyc 7281 Firmware (0140ed77-b531-5b12-a463-f90065170f0d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-20578 vulnerable 2026-06-08 05:52:45.134834 Details available
HIGH (7.5)
A TOCTOU (Time-Of-Check-Time-Of-Use) in SMM may allow an attacker with ring0 privileges and access to the BIOS menu or UEFI shell to modify the communications buffer potentially resulting in arbitrary code execution.
Published: 2024-08-13T16:52:58.457Z
Updated: 2025-03-18T20:03:43.905Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-20527 vulnerable 2026-06-08 05:52:43.443049 Details available
Improper syscall input validation in the ASP Bootloader may allow a privileged attacker to read memory out-of-bounds, potentially leading to a denial-of-service.
Published: 2023-01-10T20:57:02.034Z
Updated: 2025-04-07T15:47:00.818Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-20526 vulnerable 2026-06-08 05:52:43.421895 Details available
LOW (1.9)
Insufficient input validation in the ASP Bootloader may enable a privileged attacker with physical access to expose the contents of ASP memory potentially leading to a loss of confidentiality.
Published: 2023-11-14T18:52:41.992Z
Updated: 2024-08-02T09:05:36.942Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-20521 vulnerable 2026-06-08 05:52:43.255298 Details available
LOW (3.3)
TOCTOU in the ASP Bootloader may allow an attacker with physical access to tamper with SPI ROM records after memory content verification, potentially leading to loss of confidentiality or a denial of service.
Published: 2023-11-14T18:52:31.662Z
Updated: 2024-08-02T09:05:36.873Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-46774 vulnerable 2026-06-08 05:38:05.471072 Details available
MEDIUM (6.7)
Insufficient DRAM address validation in System Management Unit (SMU) may allow an attacker to read/write from/to an invalid DRAM address, potentially resulting in denial-of-service.
Published: 2023-11-14T18:52:11.012Z
Updated: 2024-10-11T18:07:59.642Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-26408 vulnerable 2026-06-08 05:30:44.530339 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-26403 vulnerable 2026-06-08 05:30:44.434198 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-26398 vulnerable 2026-06-08 05:30:44.358865 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-26371 vulnerable 2026-06-08 05:30:43.848894 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-26356 vulnerable 2026-06-08 05:30:43.606167 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-26342 vulnerable 2026-06-08 05:30:43.192258 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-26335 vulnerable 2026-06-08 05:30:42.825246 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-26331 vulnerable 2026-06-08 05:30:42.791592 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-26330 vulnerable 2026-06-08 05:30:42.773390 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-26329 vulnerable 2026-06-08 05:30:42.730010 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-26322 vulnerable 2026-06-08 05:30:42.585219 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-26321 vulnerable 2026-06-08 05:30:42.578114 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-26320 vulnerable 2026-06-08 05:30:42.568386 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-26312 vulnerable 2026-06-08 05:30:42.258668 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-12988 vulnerable 2026-06-08 05:18:00.128512 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-12954 vulnerable 2026-06-08 05:17:59.893701 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-12951 vulnerable 2026-06-08 05:17:59.868143 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-12944 vulnerable 2026-06-08 05:17:59.771935 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.