Input validation

2022-05-1019:15:00

PRIOn knowledge base

www.prio-n.com

7.1 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.8%

JSON

Improper validation of destination address in SVC_LOAD_FW_IMAGE_BY_INSTANCE and SVC_LOAD_BINARY_BY_ATTRIB in a malicious UApp or ABL may allow an attacker to overwrite arbitrary bootloader memory with SPI ROM contents resulting in a loss of integrity and availability.

CPENameOperatorVersion
epyc_7002_firmwareeq< romepisp31.0.0.c
epyc_7232p_firmwareeq< romepisp31.0.0.c
epyc_7252_firmwareeq< romepisp31.0.0.c
epyc_7262_firmwareeq< romepisp31.0.0.c
epyc_7272_firmwareeq< romepisp31.0.0.c
epyc_7282_firmwareeq< romepisp31.0.0.c
epyc_72f3_firmwareeq< milanpisp31.0.0.4
epyc_7302_firmwareeq< romepisp31.0.0.c
epyc_7302p_firmwareeq< romepisp31.0.0.c
epyc_7313_firmwareeq< milanpisp31.0.0.4

Name	Operator	Version
epyc_7002_firmware	eq	< romepisp31.0.0.c
epyc_7232p_firmware	eq	< romepisp31.0.0.c
epyc_7252_firmware	eq	< romepisp31.0.0.c
epyc_7262_firmware	eq	< romepisp31.0.0.c
epyc_7272_firmware	eq	< romepisp31.0.0.c
epyc_7282_firmware	eq	< romepisp31.0.0.c
epyc_72f3_firmware	eq	< milanpisp31.0.0.4
epyc_7302_firmware	eq	< romepisp31.0.0.c
epyc_7302p_firmware	eq	< romepisp31.0.0.c
epyc_7313_firmware	eq	< milanpisp31.0.0.4