9290 matches found
CVE-2018-8935
The CVE-2018-8935 entry concerns the Promontory chipset used in AMD Ryzen and Ryzen Pro platforms, where an ASIC backdoor (CHIMERA-HW) is described. The connected documents reiterate the root cause as a backdoor in the ASIC of the Promontory chipset, affecting Ryzen/Ryzen Pro systems. The materia...
CVE-2018-8932
The AMD Ryzen and Ryzen Pro processor chips have insufficient access control for the Secure Processor, aka RYZENFALL-2, RYZENFALL-3, and RYZENFALL-4...
CVE-2018-8933
The AMD EPYC Server processor chips have insufficient access control for protected memory regions, aka FALLOUT-1, FALLOUT-2, and FALLOUT-3...
CVE-2018-8932
The CVE-2018-8932 issue concerns AMD Ryzen/Ryzen Pro processors with insufficient access control in the Secure Processor (RYZENFALL-2/3/4). The available connected documents confirm a processor-embedded access-control weakness rather than a software-only flaw. Root cause: inadequate enforcement w...
CVE-2018-8935
The Promontory chipset, as used in AMD Ryzen and Ryzen Pro platforms, has a backdoor in the ASIC, aka CHIMERA-HW...
CVE-2018-8936
The AMD EPYC Server, Ryzen, Ryzen Pro, and Ryzen Mobile processor chips allow Platform Security Processor PSP privilege escalation...
CVE-2018-8934
CVE-2018-8934 covers a backdoor in the firmware of the Promontory chipset used in AMD Ryzen/Ryzen Pro platforms (aka CHIMERA-FW). The issue stems from a firmware backdoor in Promontory, with documented risk perceptions in multiple sources, and a CVSS3 score indicating CRITICAL impact across confi...
CVE-2018-8934
The Promontory chipset, as used in AMD Ryzen and Ryzen Pro platforms, has a backdoor in firmware, aka CHIMERA-FW...
CVE-2018-8936
The CVE-2018-8936 entry concerns AMD processors (EPYC Server, Ryzen, Ryzen Pro, Ryzen Mobile) where the Platform Security Processor (PSP) enables privilege escalation. The connected documents corroborate that this is a PSP-based elevation issue affecting multiple Ryzen-family products. Specifics ...
CVE-2018-8931
CVE-2018-8931 concerns AMD Ryzen/Ryzen Pro/Ryzen Mobile chips with insufficient access control on the Secure Processor (RYZENFALL-1). The connected sources confirm this as a hardware/software security issue affecting multiple Ryzen family parts and firmware/BIOS vectors. The IBM Power/OPAL firmwa...
CVE-2018-8931
The AMD Ryzen, Ryzen Pro, and Ryzen Mobile processor chips have insufficient access control for the Secure Processor, aka RYZENFALL-1...
CVE-2018-8933
CVE-2018-8933 affects AMD EPYC Server processors. The vulnerability stems from insufficient access control for protected memory regions (FALLOUT-1/2/3), enabling circumvention of platform security controls and potential unauthorized access to memory. Impact is described as high (confidentiality, ...
CVE-2018-8932: Incorrect Permission Assignment for Critical Resource
The AMD Ryzen and Ryzen Pro processor chips have insufficient access control for the Secure Processor, aka RYZENFALL-2, RYZENFALL-3, and RYZENFALL-4...
CVE-2018-8931: Incorrect Permission Assignment for Critical Resource
The AMD Ryzen, Ryzen Pro, and Ryzen Mobile processor chips have insufficient access control for the Secure Processor, aka RYZENFALL-1...
CVE-2018-8930: Undefined Security Weakness
The AMD EPYC Server, Ryzen, Ryzen Pro, and Ryzen Mobile processor chips have insufficient enforcement of Hardware Validated Boot, aka MASTERKEY-1, MASTERKEY-2, and MASTERKEY-3...
CVE-2018-8935: Undefined Security Weakness
The Promontory chipset, as used in AMD Ryzen and Ryzen Pro platforms, has a backdoor in the ASIC, aka CHIMERA-HW...
CVE-2018-8936: Undefined Security Weakness
The AMD EPYC Server, Ryzen, Ryzen Pro, and Ryzen Mobile processor chips allow Platform Security Processor PSP privilege escalation...
CVE-2018-8933: Incorrect Permission Assignment for Critical Resource
The AMD EPYC Server processor chips have insufficient access control for protected memory regions, aka FALLOUT-1, FALLOUT-2, and FALLOUT-3...
CVE-2018-8934: Undefined Security Weakness
The Promontory chipset, as used in AMD Ryzen and Ryzen Pro platforms, has a backdoor in firmware, aka CHIMERA-FW...
PT-2018-18728
Name of the Vulnerable Software and Affected Versions AMD EPYC Server, Ryzen, Ryzen Pro, and Ryzen Mobile processor chips affected versions not specified Description The issue allows for Platform Security Processor PSP privilege escalation in the affected processor chips. Recommendations At the...