Ryzen Threadripper 3970x
Vendor:
First CVE: Nov 16, 2021 · Active for 4 years
39
Total CVEs
More Total CVEs than 97% of tracked products
13.0
Avg CVEs / Year
Higher CVE frequency than 97% of tracked products
6.5
Avg CVSS
Higher Avg CVSS than 31% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Ryzen Threadripper 3970x over time
Volume of CVEsAvg CVSS Base Score
First CVE
Nov 16, 2021
4 years ago
Most Recent CVE
Nov 14, 2023
986 days ago
CVE Severity & Scoring
Ryzen Threadripper 3970x39 CVEs
64%
31%
All CVEs352,727 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local29 (74.4%)
Network9 (23.1%)
Unknown0 (0.0%)
Physical1 (2.6%)
Adjacent Network0 (0.0%)
Attack Complexity
Low35 (89.7%)
High4 (10.3%)
Unknown0 (0.0%)
User Interaction
None39 (100.0%)
Unknown0 (0.0%)
Required0 (0.0%)
Privileges Required
Low29 (74.4%)
High2 (5.1%)
None8 (20.5%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (39 CVEs).
39 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2022-23820CRITICAL Failure to validate the AMD SMM communication buffer
may allow an attacker to corrupt the SMRAM potentially leading to arbitrary
code execution. | Nov 14, 2023 | 9.8 | 30 | NO | NO |
CVE-2023-20559HIGH
Insufficient control flow management in AmdCpmGpioInitSmm may allow a privileged attacker to tamper with the SMM handler potentially leading to escalation of privileges.
| Apr 2, 2023 | 8.8 | 26 | NO | NO |
CVE-2023-20558HIGH
Insufficient control flow management in AmdCpmOemSmm may allow a privileged attacker to tamper with the SMM handler potentially leading to an escalation of privileges.
| Apr 2, 2023 | 8.8 | 26 | NO | NO |
CVE-2021-26392HIGH Insufficient verification of missing size check in 'LoadModule' may lead to an out-of-bounds write potentially allowing an attacker with privileges to gain code execution of the OS | Nov 9, 2022 | 7.8 | 25 | NO | NO |
CVE-2022-23821CRITICAL Improper access control in System Management Mode (SMM) may allow an attacker to write to SPI ROM potentially leading to arbitrary code execution.
| Nov 14, 2023 | 9.8 | 24 | NO | NO |
CVE-2021-26386HIGH A malicious or compromised UApp or ABL may be used by an attacker to issue a malformed system call to the Stage 2 Bootloader potentially leading to corrupt memory and code executio | May 12, 2022 | 7.8 | 24 | NO | NO |
CVE-2021-26317HIGH Failure to verify the protocol in SMM may allow an attacker to control the protocol and modify SPI flash resulting in a potential arbitrary code execution. | May 12, 2022 | 7.8 | 24 | NO | NO |
CVE-2023-20593MEDIUM An issue in “Zen 2” CPUs, under specific microarchitectural circumstances, may allow an attacker to potentially access sensitive information. | Jul 24, 2023 | 5.5 | 23 | NO | NO |
CVE-2021-26356HIGH A TOCTOU in ASP bootloader may allow an attacker
to tamper with the SPI ROM following data read to memory potentially resulting
in S3 data corruption and information disclosure.
| May 9, 2023 | 7.4 | 23 | NO | NO |
CVE-2022-23825MEDIUM Aliases in the branch predictor may cause some AMD processors to predict the wrong branch type potentially leading to information disclosure. | Jul 14, 2022 | 6.5 | 23 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (39 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (39 CVEs).
Media Mentions
Signals from CVEs in this product scope (39 CVEs).
Top CNAs Publishing CVEs For Ryzen Threadripper 3970x
Top CWEs
Versions
No cataloged versions.