GCVE - cpe:2.3:o:amd:epyc_7261_firmware:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:amd:epyc_7261_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

Vendor	Amd (`98d20b84-a967-5733-a541-b702f55a9781`)
Product	Epyc 7261 Firmware (`28fbda68-8726-51e8-ba71-8fed9de26a10`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-20578`	vulnerable	2026-06-08 05:52:45.134867	Details available HIGH (7.5) A TOCTOU (Time-Of-Check-Time-Of-Use) in SMM may allow an attacker with ring0 privileges and access to the BIOS menu or UEFI shell to modify the communications buffer potentially resulting in arbitrary code execution. Published: 2024-08-13T16:52:58.457Z Updated: 2025-03-18T20:03:43.905Z Open on db.gcve.eu Reference links https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3003.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-20527`	vulnerable	2026-06-08 05:52:43.443017	Details available Improper syscall input validation in the ASP Bootloader may allow a privileged attacker to read memory out-of-bounds, potentially leading to a denial-of-service. Published: 2023-01-10T20:57:02.034Z Updated: 2025-04-07T15:47:00.818Z Open on db.gcve.eu Reference links https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-20526`	vulnerable	2026-06-08 05:52:43.421858	Details available LOW (1.9) Insufficient input validation in the ASP Bootloader may enable a privileged attacker with physical access to expose the contents of ASP memory potentially leading to a loss of confidentiality. Published: 2023-11-14T18:52:41.992Z Updated: 2024-08-02T09:05:36.942Z Open on db.gcve.eu Reference links https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4002 https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3002 https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-5001	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-20521`	vulnerable	2026-06-08 05:52:43.254269	Details available LOW (3.3) TOCTOU in the ASP Bootloader may allow an attacker with physical access to tamper with SPI ROM records after memory content verification, potentially leading to loss of confidentiality or a denial of service. Published: 2023-11-14T18:52:31.662Z Updated: 2024-08-02T09:05:36.873Z Open on db.gcve.eu Reference links https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4002 https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3002 https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-5001	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-46774`	vulnerable	2026-06-08 05:38:05.469525	Details available MEDIUM (6.7) Insufficient DRAM address validation in System Management Unit (SMU) may allow an attacker to read/write from/to an invalid DRAM address, potentially resulting in denial-of-service. Published: 2023-11-14T18:52:11.012Z Updated: 2024-10-11T18:07:59.642Z Open on db.gcve.eu Reference links https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4002 https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3002 https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-5001	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-26403`	vulnerable	2026-06-08 05:30:44.434161	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-26398`	vulnerable	2026-06-08 05:30:44.358827	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-26371`	vulnerable	2026-06-08 05:30:43.848774	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-26356`	vulnerable	2026-06-08 05:30:43.606124	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-26342`	vulnerable	2026-06-08 05:30:43.192135	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-26329`	vulnerable	2026-06-08 05:30:42.730046	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-26322`	vulnerable	2026-06-08 05:30:42.585349	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-26321`	vulnerable	2026-06-08 05:30:42.578313	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-26320`	vulnerable	2026-06-08 05:30:42.568500	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-26312`	vulnerable	2026-06-08 05:30:42.259479	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-12988`	vulnerable	2026-06-08 05:18:00.128326	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-12944`	vulnerable	2026-06-08 05:17:59.772908	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.