GCVE - cpe:2.3:a:amd:amd_epyc™_embedded_3000:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:amd:amd_epyc™_embedded_3000:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Amd (`98d20b84-a967-5733-a541-b702f55a9781`)
Product	Amd Epyc™ Embedded 3000 (`3a23ebcb-2816-503d-a434-7522571e5324`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-36347`	not_vulnerable	2026-06-08 06:39:44.382310	Details available MEDIUM (6.4) Improper signature verification in AMD CPU ROM microcode patch loader may allow an attacker with local administrator privilege to load malicious microcode, potentially resulting in loss of integrity of x86 instruction execution, loss of confidentiality and integrity of data in x86 CPU privileged context and compromise of SMM execution environment. Published: 2025-06-27T22:14:01.944Z Updated: 2026-02-26T17:50:21.428Z Open on db.gcve.eu Reference links https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7033.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-21925`	not_vulnerable	2026-06-08 06:29:32.672363	Details available HIGH (8.2) Improper input validation within the AmdPspP2CmboxV2 driver may allow a privileged attacker to overwrite SMRAM, leading to arbitrary code execution. Published: 2025-02-11T20:39:03.746Z Updated: 2025-06-27T21:55:43.707Z Open on db.gcve.eu Reference links https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7027.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-31315`	vulnerable	2026-06-08 06:04:42.572013	Details available HIGH (7.5) Improper validation in a model specific register (MSR) could allow a malicious program with ring0 access to modify SMM configuration while SMI lock is enabled, potentially leading to arbitrary code execution. Published: 2024-08-09T17:08:24.237Z Updated: 2024-09-12T12:56:32.250Z Open on db.gcve.eu Reference links https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7014.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-20578`	not_vulnerable	2026-06-08 05:52:45.129013	Details available HIGH (7.5) A TOCTOU (Time-Of-Check-Time-Of-Use) in SMM may allow an attacker with ring0 privileges and access to the BIOS menu or UEFI shell to modify the communications buffer potentially resulting in arbitrary code execution. Published: 2024-08-13T16:52:58.457Z Updated: 2025-03-18T20:03:43.905Z Open on db.gcve.eu Reference links https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3003.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-20521`	vulnerable	2026-06-08 05:52:43.248508	Details available LOW (3.3) TOCTOU in the ASP Bootloader may allow an attacker with physical access to tamper with SPI ROM records after memory content verification, potentially leading to loss of confidentiality or a denial of service. Published: 2023-11-14T18:52:31.662Z Updated: 2024-08-02T09:05:36.873Z Open on db.gcve.eu Reference links https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4002 https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3002 https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-5001	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-23829`	vulnerable	2026-06-08 05:40:59.174757	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-46774`	vulnerable	2026-06-08 05:38:05.463185	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.