Ryzen Threadripper 2950x Firmware
Vendor:
First CVE: Nov 16, 2021 · Active for 4 years
33
Total CVEs
More Total CVEs than 97% of tracked products
11.0
Avg CVEs / Year
Higher CVE frequency than 97% of tracked products
6.5
Avg CVSS
Higher Avg CVSS than 33% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Ryzen Threadripper 2950x Firmware over time
Volume of CVEsAvg CVSS Base Score
First CVE
Nov 16, 2021
4 years ago
Most Recent CVE
Nov 14, 2023
987 days ago
CVE Severity & Scoring
Ryzen Threadripper 2950x Firmware33 CVEs
70%
24%
All CVEs353,173 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local24 (72.7%)
Network6 (18.2%)
Unknown0 (0.0%)
Physical3 (9.1%)
Adjacent Network0 (0.0%)
Attack Complexity
Low29 (87.9%)
High4 (12.1%)
Unknown0 (0.0%)
User Interaction
None33 (100.0%)
Unknown0 (0.0%)
Required0 (0.0%)
Privileges Required
Low25 (75.8%)
High1 (3.0%)
None7 (21.2%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (33 CVEs).
33 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2022-23820CRITICAL Failure to validate the AMD SMM communication buffer
may allow an attacker to corrupt the SMRAM potentially leading to arbitrary
code execution. | Nov 14, 2023 | 9.8 | 30 | NO | NO |
CVE-2023-20559HIGH
Insufficient control flow management in AmdCpmGpioInitSmm may allow a privileged attacker to tamper with the SMM handler potentially leading to escalation of privileges.
| Apr 2, 2023 | 8.8 | 26 | NO | NO |
CVE-2023-20558HIGH
Insufficient control flow management in AmdCpmOemSmm may allow a privileged attacker to tamper with the SMM handler potentially leading to an escalation of privileges.
| Apr 2, 2023 | 8.8 | 26 | NO | NO |
CVE-2021-26316HIGH Failure to validate the communication buffer and communication service in the BIOS may allow an attacker to tamper with the buffer resulting in potential SMM (System Management Mod | Jan 11, 2023 | 7.8 | 25 | NO | NO |
CVE-2022-23821CRITICAL Improper access control in System Management Mode (SMM) may allow an attacker to write to SPI ROM potentially leading to arbitrary code execution.
| Nov 14, 2023 | 9.8 | 24 | NO | NO |
CVE-2021-26386HIGH A malicious or compromised UApp or ABL may be used by an attacker to issue a malformed system call to the Stage 2 Bootloader potentially leading to corrupt memory and code executio | May 12, 2022 | 7.8 | 24 | NO | NO |
CVE-2021-26317HIGH Failure to verify the protocol in SMM may allow an attacker to control the protocol and modify SPI flash resulting in a potential arbitrary code execution. | May 12, 2022 | 7.8 | 24 | NO | NO |
CVE-2021-26369HIGH A malicious or compromised UApp or ABL may be used by an attacker to send a malformed system call to the bootloader, resulting in out-of-bounds memory accesses. | May 12, 2022 | 7.8 | 24 | NO | NO |
CVE-2022-23825MEDIUM Aliases in the branch predictor may cause some AMD processors to predict the wrong branch type potentially leading to information disclosure. | Jul 14, 2022 | 6.5 | 23 | NO | NO |
CVE-2022-29900MEDIUM Mis-trained branch predictions for return instructions may allow arbitrary speculative code execution under certain microarchitecture-dependent conditions. | Jul 12, 2022 | 6.5 | 23 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (33 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (33 CVEs).
Media Mentions
Signals from CVEs in this product scope (33 CVEs).
Top CNAs Publishing CVEs For Ryzen Threadripper 2950x Firmware
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| summitpi-sp3r2_1.1.0.6 | 2 | 9.8 | 0.8% | 0 | 0 |