Stack overflow

2023-05-0919:15:00

PRIOn knowledge base

www.prio-n.com

improper access control

asp

buffer overrun

arbitrary code execution

nvd

9.7 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

69.5%

JSON

Improper access control settings in ASP
Bootloader may allow an attacker to corrupt the return address causing a
stack-based buffer overrun potentially leading to arbitrary code execution.

CPENameOperatorVersion
epyc_7232p_firmwareeqromepi-1.0.0.d
epyc_7251_firmwareeqnaplespi-1.0.0.h
epyc_7252_firmwareeqromepi-1.0.0.d
epyc_7261_firmwareeqnaplespi-1.0.0.h
epyc_7262_firmwareeqromepi-1.0.0.d
epyc_7272_firmwareeqromepi-1.0.0.d
epyc_7281_firmwareeqnaplespi-1.0.0.h
epyc_7282_firmwareeqromepi-1.0.0.d
epyc_72f3_firmwareeqmilanpi-1.0.0.5
epyc_7301_firmwareeqnaplespi-1.0.0.h

Name	Operator	Version
epyc_7232p_firmware	eq	romepi-1.0.0.d
epyc_7251_firmware	eq	naplespi-1.0.0.h
epyc_7252_firmware	eq	romepi-1.0.0.d
epyc_7261_firmware	eq	naplespi-1.0.0.h
epyc_7262_firmware	eq	romepi-1.0.0.d
epyc_7272_firmware	eq	romepi-1.0.0.d
epyc_7281_firmware	eq	naplespi-1.0.0.h
epyc_7282_firmware	eq	romepi-1.0.0.d
epyc_72f3_firmware	eq	milanpi-1.0.0.5
epyc_7301_firmware	eq	naplespi-1.0.0.h