Input validation

2021-11-1619:15:00

PRIOn knowledge base

www.prio-n.com

8 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.8%

JSON

Improper input and range checking in the AMD Secure Processor (ASP) boot loader image header may allow an attacker to use attacker-controlled values prior to signature validation potentially resulting in arbitrary code execution.

CPENameOperatorVersion
epyc_7001_firmwareeq< naplespisp31.0.0.g
epyc_7002_firmwareeq< romepisp31.0.0.c
epyc_7003_firmwareeq< milanpisp31.0.0.4
epyc_7232p_firmwareeq< romepisp31.0.0.c
epyc_7251_firmwareeq< naplespisp31.0.0.g
epyc_7252_firmwareeq< romepisp31.0.0.c
epyc_7262_firmwareeq< romepisp31.0.0.c
epyc_7272_firmwareeq< romepisp31.0.0.c
epyc_7281_firmwareeq< naplespisp31.0.0.g
epyc_7282_firmwareeq< romepisp31.0.0.c

Name	Operator	Version
epyc_7001_firmware	eq	< naplespisp31.0.0.g
epyc_7002_firmware	eq	< romepisp31.0.0.c
epyc_7003_firmware	eq	< milanpisp31.0.0.4
epyc_7232p_firmware	eq	< romepisp31.0.0.c
epyc_7251_firmware	eq	< naplespisp31.0.0.g
epyc_7252_firmware	eq	< romepisp31.0.0.c
epyc_7262_firmware	eq	< romepisp31.0.0.c
epyc_7272_firmware	eq	< romepisp31.0.0.c
epyc_7281_firmware	eq	< naplespisp31.0.0.g
epyc_7282_firmware	eq	< romepisp31.0.0.c