HPESBHF03841 rev.2 - Certain HPE Servers with AMD-based Processors, Multiple Vulnerabilities (Fallout/Masterkey)

🗓️ 02 May 2018 00:00:00Reported by hpeType

HPE AMD servers Fallout and Masterkey risk cause DoS and data disclosure; update firmware HPE Support.

Reporter	Title	Published	Views	Family All 25
ATTACKERKB	CVE-2018-8930	22 Mar 201814:29	–	attackerkb
ATTACKERKB	CVE-2018-8933	22 Mar 201814:29	–	attackerkb
BDU FSTEC	The vulnerability affects the implementation of the AMD Secure Processor technology in CPUs such as Ryzen, Ryzen Pro, Ryzen Mobile, and EPYC Server. This allows malicious code to be injected into a computer’s BIOS.	4 Apr 201800:00	–	bdu_fstec
BDU FSTEC	The vulnerability affects the implementation of the AMD Secure Processor technology in CPUs such as Ryzen, Ryzen Pro, Ryzen Mobile, and EPYC Server. This allows malicious code to be injected into a computer’s BIOS.	4 Apr 201800:00	–	bdu_fstec
BDU FSTEC	The vulnerability affects the implementation of the AMD Secure Processor technology in CPUs such as Ryzen, Ryzen Pro, Ryzen Mobile, and EPYC Server. This allows malicious code to be injected into a computer’s BIOS.	4 Apr 201800:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the AMD Secure Processor implementation in EPYC Server processors allows for writing to the secure memory region of the processor.	4 Apr 201800:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the implementation of the AMD Secure Processor technology in EPYC Server processors allows for the disabling of System Management Mode protection.	4 Apr 201800:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the AMD Secure Processor implementation in EPYC Server processors allows for reading from the protected area of the processor.	4 Apr 201800:00	–	bdu_fstec
CNVD	AMD EPYC Server File Write Vulnerability	28 Mar 201800:00	–	cnvd
CNVD	Multiple AMD product design vulnerabilities	28 Mar 201800:00	–	cnvd