Input validation

2021-11-1619:15:00

PRIOn knowledge base

www.prio-n.com

8 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.8%

JSON

Insufficient validation of BIOS image length by ASP Firmware could lead to arbitrary code execution.

CPENameOperatorVersion
epyc_7232p_firmwareeq< romepisp31.0.0.c
epyc_7251_firmwareeq< naplespisp31.0.0.g
epyc_7252_firmwareeq< romepisp31.0.0.c
epyc_7261_firmwareeq< naplespisp31.0.0.g
epyc_7262_firmwareeq< romepisp31.0.0.c
epyc_7272_firmwareeq< romepisp31.0.0.c
epyc_7281_firmwareeq< naplespisp31.0.0.g
epyc_7282_firmwareeq< romepisp31.0.0.c
epyc_72f3_firmwareeq< milanpisp31.0.0.4
epyc_7301_firmwareeq< naplespisp31.0.0.g

Name	Operator	Version
epyc_7232p_firmware	eq	< romepisp31.0.0.c
epyc_7251_firmware	eq	< naplespisp31.0.0.g
epyc_7252_firmware	eq	< romepisp31.0.0.c
epyc_7261_firmware	eq	< naplespisp31.0.0.g
epyc_7262_firmware	eq	< romepisp31.0.0.c
epyc_7272_firmware	eq	< romepisp31.0.0.c
epyc_7281_firmware	eq	< naplespisp31.0.0.g
epyc_7282_firmware	eq	< romepisp31.0.0.c
epyc_72f3_firmware	eq	< milanpisp31.0.0.4
epyc_7301_firmware	eq	< naplespisp31.0.0.g