HPSBHF03581 rev. 4 - AMD Secure Processor and Promontory Chipset Exploits

🗓️ 21 Mar 2018 00:00:00Reported by CTSType

AMD Secure Processor and Promontory Chipset Exploits. Circumvention of platform security controls, unauthorized access to system memory, installation of difficult to detect malware. HP collaborating with AMD for relevant firmware updates

Reporter	Title	Published	Views	Family All 44
ATTACKERKB	CVE-2018-8934	22 Mar 201814:29	–	attackerkb
ATTACKERKB	CVE-2018-8932	22 Mar 201814:29	–	attackerkb
ATTACKERKB	CVE-2018-8930	22 Mar 201814:29	–	attackerkb
ATTACKERKB	CVE-2018-8933	22 Mar 201814:29	–	attackerkb
BDU FSTEC	The vulnerability affects the implementation of the AMD Secure Processor technology in CPUs such as Ryzen, Ryzen Pro, Ryzen Mobile, and EPYC Server. This allows malicious code to be injected into a computer’s BIOS.	4 Apr 201800:00	–	bdu_fstec
BDU FSTEC	The vulnerability affects the implementation of the AMD Secure Processor technology in CPUs such as Ryzen, Ryzen Pro, Ryzen Mobile, and EPYC Server. This allows malicious code to be injected into a computer’s BIOS.	4 Apr 201800:00	–	bdu_fstec
BDU FSTEC	The vulnerability affects the implementation of the AMD Secure Processor technology in CPUs such as Ryzen, Ryzen Pro, Ryzen Mobile, and EPYC Server. This allows malicious code to be injected into a computer’s BIOS.	4 Apr 201800:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the implementation of AMD Secure Processor technology in Ryzen and Ryzen Pro processors allows for the disabling of System Management Mode protection.	4 Apr 201800:00	–	bdu_fstec
BDU FSTEC	The vulnerability of AMD Secure Processor technology in Ryzen and Ryzen Pro processors allows for reading from the protected area of the processor.	4 Apr 201800:00	–	bdu_fstec
BDU FSTEC	The vulnerability of AMD Secure Processor technology allows for the execution of arbitrary code on a secure processor.	4 Apr 201800:00	–	bdu_fstec

21 Mar 2019 00:00Current

1Low risk

Vulners AI Score1

CVSS 39

CVSS 29.3

EPSS0.01811