Epyc 8024pn
Vendor:
First CVE: Nov 14, 2023 · Active for 2 years
13
Total CVEs
More Total CVEs than 91% of tracked products
6.5
Avg CVEs / Year
Higher CVE frequency than 91% of tracked products
6.4
Avg CVSS
Higher Avg CVSS than 28% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Epyc 8024pn over time
Volume of CVEsAvg CVSS Base Score
First CVE
Nov 14, 2023
2 years ago
Most Recent CVE
Aug 13, 2024
712 days ago
CVE Severity & Scoring
Epyc 8024pn13 CVEs
54%
31%
All CVEs352,719 CVEs
45%
40%
11%
LowMediumHighCritical
Attack Vector
Local7 (53.8%)
Network6 (46.2%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low12 (92.3%)
High1 (7.7%)
Unknown0 (0.0%)
User Interaction
None13 (100.0%)
Unknown0 (0.0%)
Required0 (0.0%)
Privileges Required
Low0 (0.0%)
High9 (69.2%)
None4 (30.8%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (13 CVEs).
13 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2023-20591CRITICAL Improper re-initialization of IOMMU during the DRTM event
may permit an untrusted platform configuration to persist, allowing an attacker
to read or modify hypervisor memory, poten | Aug 13, 2024 | 10.0 | 30 | NO | NO |
CVE-2024-21978HIGH Improper input validation in SEV-SNP could allow a malicious hypervisor to read or overwrite guest memory potentially leading to data leakage or data corruption. | Aug 5, 2024 | 7.9 | 24 | NO | NO |
CVE-2023-20566HIGH Improper address validation in ASP with SNP enabled may potentially allow an attacker to compromise guest memory integrity. | Nov 14, 2023 | 7.5 | 22 | NO | NO |
CVE-2023-20584MEDIUM IOMMU improperly handles certain special address
ranges with invalid device table entries (DTEs), which may allow an attacker
with privileges and a compromised Hypervisor to
induce | Aug 13, 2024 | 6.0 | 20 | NO | NO |
CVE-2023-20578MEDIUM A TOCTOU (Time-Of-Check-Time-Of-Use) in SMM may allow
an attacker with ring0 privileges and access to the
BIOS menu or UEFI shell to modify the communications buffer potentially
re | Aug 13, 2024 | 6.4 | 20 | NO | NO |
CVE-2024-21980HIGH Improper restriction of write operations in SNP firmware could allow a malicious hypervisor to potentially overwrite a guest's memory or UMC seed resulting in loss of confidentiali | Aug 5, 2024 | 7.9 | 20 | NO | NO |
CVE-2021-46774HIGH Insufficient DRAM address validation in System
Management Unit (SMU) may allow an attacker to read/write from/to an invalid
DRAM address, potentially resulting in denial-of-service | Nov 14, 2023 | 7.5 | 20 | NO | NO |
CVE-2023-31346MEDIUM Failure to initialize
memory in SEV Firmware may allow a privileged attacker to access stale data
from other guests.
| Feb 13, 2024 | 6.0 | 19 | NO | NO |
CVE-2023-31347MEDIUM Due to a code bug in
Secure_TSC, SEV firmware may allow an attacker with high privileges to cause a
guest to observe an incorrect TSC when Secure TSC is enabled potentially
resulti | Feb 13, 2024 | 4.9 | 17 | NO | NO |
CVE-2023-31355MEDIUM Improper restriction of write operations in SNP firmware could allow a malicious hypervisor to overwrite a guest's UMC seed potentially allowing reading of memory from a decommissi | Aug 5, 2024 | 6.0 | 16 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (13 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (13 CVEs).
Media Mentions
Signals from CVEs in this product scope (13 CVEs).
Top CNAs Publishing CVEs For Epyc 8024pn
Top CWEs
Versions
No cataloged versions.