CVE-2021-46750

CVE-2021-46750 describes a failure to validate address and size in a Trusted Execution Environment (TEE) that could allow a local x86 attacker to send malformed messages to the graphics mailbox, causing overlap of a previously allocated Trusted Memory Region (TMR) by the ASP bootloader and potent...

AMD Embedded Processors和AMD Client Processor 安全漏洞

AMD Embedded Processors and AMD Client Processor are both products of AMD Semiconductor, Inc.AMD Embedded Processors are a family of embedded high-performance GPUs.AMD Client Processor is a processor for client devices such as personal computers, AMD Embedded Processors and AMD Client Processors...

K000152749: AMI’s SPx vulnerability CVE-2024-54085

Security Advisory Description AMI's SPx contains a vulnerability in the BMC where an Attacker may bypass authentication remotely through the Redfish Host Interface. A successful exploitation of this vulnerability may lead to a loss of confidentiality, integrity, and/or availability. CVE-2024-5408...

CVE-2025-52688

CVE-2025-52688 — Command injection in OmniAccess Stellar Web Management Interface Source documents confirm a root-level command injection vulnerability affecting Alcatel-Lucent Enterprise Enterprise Wi‑Fi APs (notably AP13161/AP1361D family) via the OmniAccess Stellar Web Management Interface. Th...

CVE-2025-24004

A physical attacker with access to the device display via USB-C can send a message to the device which triggers an unsecure copy to a buffer resulting in loss of integrity and a temporary denial-of-service for the stations until they got restarted by the watchdog...

CVE-2025-24004

A physical attacker with access to the device display via USB-C can send a message to the device which triggers an unsecure copy to a buffer resulting in loss of integrity and a temporary denial-of-service for the stations until they got restarted by the watchdog...

CVE-2025-24004 USB-C Buffer Overflow via Display Interface in EV Charging Stations

A physical attacker with access to the device display via USB-C can send a message to the device which triggers an unsecure copy to a buffer resulting in loss of integrity and a temporary denial-of-service for the stations until they got restarted by the watchdog...

CVE-2025-24004

The CVE-2025-24004 entry describes a vulnerability affecting Phoenix Contact CHARX SEC-3xxx devices (CHARX SEC-3000/3050/3100 variants). A physical attacker with access to the device display via USB‑C can send a message that triggers an unsecure copy into a buffer, leading to integrity loss and a...

PHOENIX CONTACT CHARX SEC-3xxx 安全漏洞

PHOENIX CONTACT CHARX SEC-3000 etc. are products of PHOENIX CONTACT, Germany.PHOENIX CONTACT CHARX SEC-3000 is an AC charge controller.PHOENIX CONTACT CHARX SEC-3050 is an AC charge controller.PHOENIX CONTACT CHARX SEC-3100 is an AC charge controller. PHOENIX CONTACT CHARX SEC-3100 is an AC charg...

CVE-2024-36347

Improper signature verification in AMD CPU ROM microcode patch loader may allow an attacker with local administrator privilege to load malicious microcode, potentially resulting in loss of integrity of x86 instruction execution, loss of confidentiality and integrity of data in x86 CPU privileged...

CVE-2024-36347

Summary (CVE-2024-36347) Improper signature verification in the AMD CPU ROM microcode patch loader may allow a local administrator to load unsigned/malicious microcode, risking integrity of x86 instruction execution, and confidentiality/integrity of data in the privileged CPU context and potentia...

CVE-2024-36347

Improper signature verification in AMD CPU ROM microcode patch loader may allow an attacker with local administrator privilege to load malicious microcode, potentially resulting in loss of integrity of x86 instruction execution, loss of confidentiality and integrity of data in x86 CPU privileged...

VulnCheck KEV: CVE-2024-54085

AMI’s SPx contains a vulnerability in the BMC where an Attacker may bypass authentication remotely through the Redfish Host Interface. A successful exploitation of this vulnerability may lead to a loss of confidentiality, integrity, and/or availability...

AMI MegaRAC SPx Authentication Bypass by Spoofing Vulnerability

AMI MegaRAC SPx contains an authentication bypass by spoofing vulnerability in the Redfish Host Interface. A successful exploitation of this vulnerability may lead to a loss of confidentiality, integrity, and/or availability...

Vulnerability of the otx2_set_rxfh_context() function in the drivers/net/ethernet/marvell/octeontx2/nic/otx2_ethtool.c file – Marvell Ethernet network adapter support driver for the Linux operating system. This vulnerability allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

Vulnerability of the otx2setrxfhcontext function in the drivers/net/ethernet/marvell/octeontx2/nic/otx2ethtool.c module – Marvell Ethernet network adapter drivers for Linux operating systems are vulnerable due to buffer overflow exploits. Exploitation of this vulnerability could allow attackers t...

CVE-2023-20599

Improper register access control in ASP may allow a privileged attacker to perform unauthorized access to ASP’s Crypto Co-Processor CCP registers from x86 resulting in potential loss of control of cryptographic key pointer/index leading to loss of integrity or confidentiality...

CVE-2023-20599

Improper register access control in ASP may allow a privileged attacker to perform unauthorized access to ASP’s Crypto Co-Processor CCP registers from x86 resulting in potential loss of control of cryptographic key pointer/index leading to loss of integrity or confidentiality...

CVE-2025-0037

In AMD Versal Adaptive SoC devices, the lack of address validation when executing PLM runtime services through the PLM firmware can allow access to isolated or protected memory spaces, resulting in the loss of integrity and confidentiality...

Unauthorized Access to AMD Secure Processor’s Crypto-Co-Processor

CVE Details Refer to Glossary for explanation of terms CVE| CVSS Score| CVE Description ---|---|--- CVE-2023-20599| 7.9 High CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N| Improper register access control in ASP may allow a privileged attacker to perform unauthorized access to ASP’s Crypto...

PT-2025-24687 · Asp · Asp

Name of the Vulnerable Software and Affected Versions: ASP affected versions not specified Description: The issue is related to improper register access control in ASP, which may allow a privileged attacker to perform unauthorized access to ASP's Crypto Co-Processor CCP registers from x86. This...