Epyc 9754
Vendor:
First CVE: Jul 11, 2023 · Active for 3 years
14
Total CVEs
More Total CVEs than 91% of tracked products
7.0
Avg CVEs / Year
Higher CVE frequency than 92% of tracked products
6.4
Avg CVSS
Higher Avg CVSS than 27% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Epyc 9754 over time
Volume of CVEsAvg CVSS Base Score
First CVE
Jul 11, 2023
3 years ago
Most Recent CVE
Aug 13, 2024
713 days ago
CVE Severity & Scoring
Epyc 975414 CVEs
57%
29%
All CVEs352,727 CVEs
45%
40%
11%
LowMediumHighCritical
Attack Vector
Local8 (57.1%)
Network6 (42.9%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low12 (85.7%)
High2 (14.3%)
Unknown0 (0.0%)
User Interaction
None14 (100.0%)
Unknown0 (0.0%)
Required0 (0.0%)
Privileges Required
Low3 (21.4%)
High7 (50.0%)
None4 (28.6%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (14 CVEs).
14 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2023-20591CRITICAL Improper re-initialization of IOMMU during the DRTM event
may permit an untrusted platform configuration to persist, allowing an attacker
to read or modify hypervisor memory, poten | Aug 13, 2024 | 10.0 | 30 | NO | NO |
CVE-2024-21978HIGH Improper input validation in SEV-SNP could allow a malicious hypervisor to read or overwrite guest memory potentially leading to data leakage or data corruption. | Aug 5, 2024 | 7.9 | 24 | NO | NO |
CVE-2023-20566HIGH Improper address validation in ASP with SNP enabled may potentially allow an attacker to compromise guest memory integrity. | Nov 14, 2023 | 7.5 | 22 | NO | NO |
CVE-2023-20569MEDIUM
A side channel vulnerability on some of the AMD CPUs may allow an attacker to influence the return address prediction. This may result in speculative execution at an attacker-co | Aug 8, 2023 | 4.7 | 21 | NO | NO |
CVE-2023-20575MEDIUM
A potential power side-channel vulnerability in some AMD processors may allow an authenticated attacker to use the power reporting functionality to monitor a program’s execution i | Jul 11, 2023 | 6.5 | 21 | NO | NO |
CVE-2023-20584MEDIUM IOMMU improperly handles certain special address
ranges with invalid device table entries (DTEs), which may allow an attacker
with privileges and a compromised Hypervisor to
induce | Aug 13, 2024 | 6.0 | 20 | NO | NO |
CVE-2023-20578MEDIUM A TOCTOU (Time-Of-Check-Time-Of-Use) in SMM may allow
an attacker with ring0 privileges and access to the
BIOS menu or UEFI shell to modify the communications buffer potentially
re | Aug 13, 2024 | 6.4 | 20 | NO | NO |
CVE-2024-21980HIGH Improper restriction of write operations in SNP firmware could allow a malicious hypervisor to potentially overwrite a guest's memory or UMC seed resulting in loss of confidentiali | Aug 5, 2024 | 7.9 | 20 | NO | NO |
CVE-2021-46774HIGH Insufficient DRAM address validation in System
Management Unit (SMU) may allow an attacker to read/write from/to an invalid
DRAM address, potentially resulting in denial-of-service | Nov 14, 2023 | 7.5 | 20 | NO | NO |
CVE-2021-46766MEDIUM Improper clearing of sensitive data in the ASP Bootloader may expose secret keys to a privileged attacker accessing ASP SRAM, potentially leading to a loss of confidentiality. | Nov 14, 2023 | 5.5 | 17 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (14 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (14 CVEs).
Media Mentions
Signals from CVEs in this product scope (14 CVEs).
Top CNAs Publishing CVEs For Epyc 9754
Top CWEs
Versions
No cataloged versions.