Approved changes feed: RSS · Atom

cpe:2.3:a:amd:amd_epyc™_embedded_7002:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorAmd (98d20b84-a967-5733-a541-b702f55a9781)
ProductAmd Epyc™ Embedded 7002 (ed421ab5-4a68-5705-95cb-fbb0c8b03b4e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-36347 not_vulnerable 2026-06-08 06:39:44.383400 Details available
MEDIUM (6.4)
Improper signature verification in AMD CPU ROM microcode patch loader may allow an attacker with local administrator privilege to load malicious microcode, potentially resulting in loss of integrity of x86 instruction execution, loss of confidentiality and integrity of data in x86 CPU privileged context and compromise of SMM execution environment.
Published: 2025-06-27T22:14:01.944Z
Updated: 2026-02-26T17:50:21.428Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-21925 not_vulnerable 2026-06-08 06:29:32.673998 Details available
HIGH (8.2)
Improper input validation within the AmdPspP2CmboxV2 driver may allow a privileged attacker to overwrite SMRAM, leading to arbitrary code execution.
Published: 2025-02-11T20:39:03.746Z
Updated: 2025-06-27T21:55:43.707Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-31315 vulnerable 2026-06-08 06:04:42.573006 Details available
HIGH (7.5)
Improper validation in a model specific register (MSR) could allow a malicious program with ring0 access to modify SMM configuration while SMI lock is enabled, potentially leading to arbitrary code execution.
Published: 2024-08-09T17:08:24.237Z
Updated: 2024-09-12T12:56:32.250Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-20578 not_vulnerable 2026-06-08 05:52:45.129034 Details available
HIGH (7.5)
A TOCTOU (Time-Of-Check-Time-Of-Use) in SMM may allow an attacker with ring0 privileges and access to the BIOS menu or UEFI shell to modify the communications buffer potentially resulting in arbitrary code execution.
Published: 2024-08-13T16:52:58.457Z
Updated: 2025-03-18T20:03:43.905Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-20533 vulnerable 2026-06-08 05:52:43.516890 Details available
MEDIUM (6.1)
Insufficient DRAM address validation in System Management Unit (SMU) may allow an attacker to read/write from/to an invalid DRAM address, potentially resulting in denial-of-service.
Published: 2023-11-14T18:52:52.106Z
Updated: 2024-08-02T09:05:36.915Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-20521 vulnerable 2026-06-08 05:52:43.249267 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-46774 vulnerable 2026-06-08 05:38:05.464100 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-26345 vulnerable 2026-06-08 05:30:43.276563 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.