Epyc 9534
Vendor:
First CVE: Jul 11, 2023 · Active for 3 years
16
Total CVEs
More Total CVEs than 92% of tracked products
8.0
Avg CVEs / Year
Higher CVE frequency than 94% of tracked products
6.3
Avg CVSS
Higher Avg CVSS than 25% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Epyc 9534 over time
Volume of CVEsAvg CVSS Base Score
First CVE
Jul 11, 2023
3 years ago
Most Recent CVE
Aug 13, 2024
713 days ago
CVE Severity & Scoring
Epyc 953416 CVEs
63%
25%
All CVEs352,727 CVEs
45%
40%
11%
LowMediumHighCritical
Attack Vector
Local9 (56.3%)
Network7 (43.8%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low14 (87.5%)
High2 (12.5%)
Unknown0 (0.0%)
User Interaction
None16 (100.0%)
Unknown0 (0.0%)
Required0 (0.0%)
Privileges Required
Low3 (18.8%)
High9 (56.3%)
None4 (25.0%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (16 CVEs).
16 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2023-20591CRITICAL Improper re-initialization of IOMMU during the DRTM event
may permit an untrusted platform configuration to persist, allowing an attacker
to read or modify hypervisor memory, poten | Aug 13, 2024 | 10.0 | 30 | NO | NO |
CVE-2024-21978HIGH Improper input validation in SEV-SNP could allow a malicious hypervisor to read or overwrite guest memory potentially leading to data leakage or data corruption. | Aug 5, 2024 | 7.9 | 24 | NO | NO |
CVE-2023-20566HIGH Improper address validation in ASP with SNP enabled may potentially allow an attacker to compromise guest memory integrity. | Nov 14, 2023 | 7.5 | 22 | NO | NO |
CVE-2023-20569MEDIUM
A side channel vulnerability on some of the AMD CPUs may allow an attacker to influence the return address prediction. This may result in speculative execution at an attacker-co | Aug 8, 2023 | 4.7 | 21 | NO | NO |
CVE-2023-20575MEDIUM
A potential power side-channel vulnerability in some AMD processors may allow an authenticated attacker to use the power reporting functionality to monitor a program’s execution i | Jul 11, 2023 | 6.5 | 21 | NO | NO |
CVE-2023-20584MEDIUM IOMMU improperly handles certain special address
ranges with invalid device table entries (DTEs), which may allow an attacker
with privileges and a compromised Hypervisor to
induce | Aug 13, 2024 | 6.0 | 20 | NO | NO |
CVE-2023-20578MEDIUM A TOCTOU (Time-Of-Check-Time-Of-Use) in SMM may allow
an attacker with ring0 privileges and access to the
BIOS menu or UEFI shell to modify the communications buffer potentially
re | Aug 13, 2024 | 6.4 | 20 | NO | NO |
CVE-2024-21980HIGH Improper restriction of write operations in SNP firmware could allow a malicious hypervisor to potentially overwrite a guest's memory or UMC seed resulting in loss of confidentiali | Aug 5, 2024 | 7.9 | 20 | NO | NO |
CVE-2021-46774HIGH Insufficient DRAM address validation in System
Management Unit (SMU) may allow an attacker to read/write from/to an invalid
DRAM address, potentially resulting in denial-of-service | Nov 14, 2023 | 7.5 | 20 | NO | NO |
CVE-2023-31346MEDIUM Failure to initialize
memory in SEV Firmware may allow a privileged attacker to access stale data
from other guests.
| Feb 13, 2024 | 6.0 | 19 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (16 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (16 CVEs).
Media Mentions
Signals from CVEs in this product scope (16 CVEs).
Top CNAs Publishing CVEs For Epyc 9534
Top CWEs
Versions
No cataloged versions.