Information disclosure

2023-01-1108:15:00

PRIOn knowledge base

www.prio-n.com

asp

bios

drtm

x86

software

sensitive memory

information disclosure

5.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.2%

JSON

Insufficient validation in ASP BIOS and DRTM commands may allow malicious supervisor x86 software to disclose the contents of sensitive memory which may result in information disclosure.

CPENameOperatorVersion
epyc_7003_firmwareeq< milanpi-1.0.0.3
epyc_72f3_firmwareeq< milanpi-1.0.0.3
epyc_7313_firmwareeq< milanpi-1.0.0.3
epyc_7313p_firmwareeq< milanpi-1.0.0.3
epyc_7343_firmwareeq< milanpi-1.0.0.3
epyc_7373x_firmwareeq< milanpi-1.0.0.3
epyc_73f3_firmwareeq< milanpi-1.0.0.3
epyc_7413_firmwareeq< milanpi-1.0.0.3
epyc_7443_firmwareeq< milanpi-1.0.0.3
epyc_7443p_firmwareeq< milanpi-1.0.0.3

Name	Operator	Version
epyc_7003_firmware	eq	< milanpi-1.0.0.3
epyc_72f3_firmware	eq	< milanpi-1.0.0.3
epyc_7313_firmware	eq	< milanpi-1.0.0.3
epyc_7313p_firmware	eq	< milanpi-1.0.0.3
epyc_7343_firmware	eq	< milanpi-1.0.0.3
epyc_7373x_firmware	eq	< milanpi-1.0.0.3
epyc_73f3_firmware	eq	< milanpi-1.0.0.3
epyc_7413_firmware	eq	< milanpi-1.0.0.3
epyc_7443_firmware	eq	< milanpi-1.0.0.3
epyc_7443p_firmware	eq	< milanpi-1.0.0.3