CVE-2020-12961

CVE-2020-12961 affects AMD Platform Security Processor (PSP). The issue could allow an attacker to zero a privileged register on the System Management Network, potentially bypassing SPI ROM protections. Documented impact is high (CVSSv3.1: 7.8 Local, High impact) with local access and no user int...

CVE-2020-12961

A potential vulnerability exists in AMD Platform Security Processor PSP that may allow an attacker to zero any privileged register on the System Management Network which may lead to bypassing SPI ROM protections...

CVE-2021-26315

When the AMD Platform Security Processor PSP boot rom loads, authenticates, and subsequently decrypts an encrypted FW, due to insufficient verification of the integrity of decrypted image, arbitrary code may be executed in the PSP when encrypted firmware images are used...

PT-2021-8202 · Amd +1 · Amd Platform Security Processor +2

Name of the Vulnerable Software and Affected Versions: AMD Platform Security Processor affected versions not specified Description: The issue is related to improper input and range checking in the AMD Secure Processor ASP boot loader image header. This may allow an attacker to use...

AMD Platform Security Processor输入验证错误漏洞

AMD Platform Security Processor is a security processor from AMD. The AMD Platform Security Processor suffers from an input validation error vulnerability that originates from a vulnerability that can be exploited by an attacker to exploit multiple vulnerabilities in AMD processors...

AMD Platform Security Processor 输入验证错误漏洞

AMD Platform Security Processor is a security processor from AMD, Inc. AMD Platform Security Processor suffers from an input validation error vulnerability that stems from insufficient input validation against discrete TPM commands in the PSP firmware could lead to a potential loss of integrity a...

AMD 多款产品安全漏洞

AMD Platform Security Processor and AMD Secure Encrypted Virtualization are both products of AMD Corporation.AMD Platform Security Processor is a security processor.AMD Secure Encrypted Virtualization is a software application. Hardware-accelerated memory encryption to protect data in use. AMD...

AMD Platform Security Processor命令注入漏洞

HP ProLiant is the intelligent computing foundation for HP America's hybrid cloud, providing unparalleled workload optimization, security and automation, all available as a service. HP ProLiant has a command injection vulnerability that can be exploited by an attacker who can exploit multiple...

AMD Platform Security Processor安全漏洞

AMD Platform Security Processor is a security processor from AMD. A security vulnerability exists in AMD Platform Security Processor. No information about this vulnerability is available at this time, please stay tuned to CNNVD or the vendor announcement...

AMD Platform Security Processor信任管理问题漏洞

AMD Platform Security Processor is a security processor from AMD. The AMD Platform Security Processor suffers from a trust management issue vulnerability that stems from the fact that an attacker could use this vulnerability to exploit multiple vulnerabilities in AMD processors...

AMD 多款产品缓冲区错误漏洞

AMD Platform Security Processor and others are products of AMD Corporation.AMD Platform Security Processor is a security processor.AMD Secure Encrypted Virtualization is an application software.AMD System Management Unit SMU is a system management unit. A buffer error vulnerability exists in...

AMD 多款产品输入验证错误漏洞

AMD Platform Security Processor and others are products of AMD Corporation.AMD Platform Security Processor is a security processor.AMD Secure Encrypted Virtualization is an application software.AMD System Management Unit SMU is a system management unit. An input validation error vulnerability...

AMD Platform Security Processor 安全漏洞

AMD Platform Security Processor is a security processor from AMD. AMD Platform Security Processor suffers from a security vulnerability that stems from an attacker's ability to exploit multiple vulnerabilities in AMD processors...

AMD Platform Security Processor 数据伪造问题漏洞

AMD Platform Security Processor is a security processor from AMD, Inc. The AMD Platform Security Processor suffers from a data forgery issue vulnerability that originates when the AMD Platform Security Processor PSP boots rom loads, verifies, and subsequently decrypts encrypted firmware, due to...

AMD 多款产品输入验证错误漏洞

AMD Platform Security Processor, etc. are products of AMD USA. AMD Platform Security Processor is a security processor. AMD Secure Encrypted Virtualization is an application software. Micro Devices System Management Unit AMD SMU, etc. are products of AMD Advanced Micro Devices, Inc. in the U.S...

AMD多款产品输入验证错误漏洞

AMD Platform Security Processor and AMD Secure Encrypted Virtualization are both products of AMD Corporation.AMD Platform Security Processor is a security processor.AMD Secure Encrypted Virtualization is a software application. Hardware-accelerated memory encryption to protect data in use. An inp...

AMD Platform Security Processor 竞争条件问题漏洞

AMD Platform Security Processor is a security processor from AMD. AMD Platform Security Processor suffers from a Competitive Conditions Issue vulnerability, which stems from a vulnerability that can be exploited by an attacker to exploit multiple vulnerabilities in AMD processors...

Cross-Site Request Forgery (CSRF) in pkp/pkp-lib

Description Higher severity CSRF in PKP-LIB plugins ImportExport is vulnerable to CSRF in terms of file uploads and file imports, an attacker can import arbitrary users into the platform, 1: POST /index.php/e/management/importexport/plugin/UserImportExportPlugin/uploadImportXML 2: GET...

AMD Platform Security Processor (PSP) Chipset Driver Information Disclosure (AMD-SB-1009)

The version of the AMD Platform Security Processor PSP chipset driver found on the remote host is prior to 5.17.0.0. It is, therefore, affected by an information disclosure vulnerability. The discretionary access control list DACL may allow low privileged users to open a handle and send requests ...

CVE-2021-26333

An information disclosure vulnerability exists in AMD Platform Security Processor PSP chipset driver. The discretionary access control list DACL may allow low privileged users to open a handle and send requests to the driver resulting in a potential data leak from uninitialized physical pages...