The vulnerability affects the implementation of the AMD Secure Processor technology in CPUs such as Ryzen, Ryzen Pro, Ryzen Mobile, and EPYC Server. This allows malicious code to be injected into a computer’s BIOS.

🗓️ 04 Apr 2018 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 1 Views

AMD Secure Processor vulnerability allows bios code injection via flash tampering with admin access, bypassing secure boot.

Reporter	Title	Published	Views	Family All 13
ATTACKERKB	CVE-2018-8930	22 Mar 201814:29	–	attackerkb
BDU FSTEC	The vulnerability affects the implementation of the AMD Secure Processor technology in CPUs such as Ryzen, Ryzen Pro, Ryzen Mobile, and EPYC Server. This allows malicious code to be injected into a computer’s BIOS.	4 Apr 201800:00	–	bdu_fstec
BDU FSTEC	The vulnerability affects the implementation of the AMD Secure Processor technology in CPUs such as Ryzen, Ryzen Pro, Ryzen Mobile, and EPYC Server. This allows malicious code to be injected into a computer’s BIOS.	4 Apr 201800:00	–	bdu_fstec
CNVD	Multiple AMD product design vulnerabilities	28 Mar 201800:00	–	cnvd
CVE	CVE-2018-8930	22 Mar 201814:00	–	cve
Cvelist	CVE-2018-8930	22 Mar 201814:00	–	cvelist
EUVD	EUVD-2018-20538	7 Oct 202500:30	–	euvd
F5 Networks	K02326457: Multiple AMD processor vulnerabilities	21 Feb 202318:46	–	f5
Fortinet	AMD processors affected by vulnerabilities: Ryzenfall, Fallout, Chimera and Masterkey	13 Apr 201800:00	–	fortinet
Hewlett-Packard	HPSBHF03581 rev. 4 - AMD Secure Processor and Promontory Chipset Exploits	21 Mar 201800:00	–	hp

Source	Link
amdflaws	www.amdflaws.com/
blog	www.blog.trailofbits.com/2018/03/15/amd-flaws-technical-summary/
safefirmware	www.safefirmware.com/amdflaws_whitepaper.pdf
community	www.community.amd.com/community/amd-corporate/blog/2018/03/21/initial-amd-technical-assessment-of-cts-labs-research
securitylab	www.securitylab.ru/news/492088.php
nvd	www.nvd.nist.gov/vuln/detail/CVE-2018-8930
vuldb	www.vuldb.com/de/
web	www.web.nvd.nist.gov/view/vuln/detail

23 Mar 2021 00:00Current

5.6Medium risk

Vulners AI Score5.6

CVSS 26

EPSS0.00573

Advanced Micro Devices Secure Processor Flash memory tampering Bios code injection Secure boot bypass Admin privileges Ryzen Pro