Lucene search
+L

80 matches found

OSV
OSV
•added 2021/11/16 7:15 p.m.•15 views

CVE-2021-26320

Insufficient validation of the AMD SEV Signing Key ASK in the SENDSTART command in the SEV Firmware may allow a local authenticated attacker to perform a denial of service of the PSP...

5.5CVSS5.8AI score0.00186EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2021/11/16 6:13 p.m.•46 views

CVE-2020-12961

A potential vulnerability exists in AMD Platform Security Processor PSP that may allow an attacker to zero any privileged register on the System Management Network which may lead to bypassing SPI ROM protections...

7.5AI score0.00248EPSS
SaveExploits0References1
CVE
CVE
•added 2021/11/16 6:13 p.m.•70 views

CVE-2020-12961

CVE-2020-12961 affects AMD Platform Security Processor (PSP). The issue could allow an attacker to zero a privileged register on the System Management Network, potentially bypassing SPI ROM protections. Documented impact is high (CVSSv3.1: 7.8 Local, High impact) with local access and no user int...

7.8CVSS7.4AI score0.00248EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2021/11/16 6:12 p.m.•54 views

CVE-2021-26315

When the AMD Platform Security Processor PSP boot rom loads, authenticates, and subsequently decrypts an encrypted FW, due to insufficient verification of the integrity of decrypted image, arbitrary code may be executed in the PSP when encrypted firmware images are used...

7.9AI score0.00165EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/11/16 12:00 a.m.•1 views

CVE-2021-26315: Insufficient Verification of Data Authenticity

When the AMD Platform Security Processor PSP boot rom loads, authenticates, and subsequently decrypts an encrypted FW, due to insufficient verification of the integrity of decrypted image, arbitrary code may be executed in the PSP when encrypted firmware images are used...

7.8CVSS6AI score0.00165EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/11/16 12:00 a.m.•2 views

CVE-2020-12961: Improper Input Validation

A potential vulnerability exists in AMD Platform Security Processor PSP that may allow an attacker to zero any privileged register on the System Management Network which may lead to bypassing SPI ROM protections...

7.8CVSS5.8AI score0.00248EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2021/11/12 12:00 a.m.•14 views

AMD 多款产品缓冲区错误漏洞

AMD Platform Security Processor and others are products of AMD Corporation.AMD Platform Security Processor is a security processor.AMD Secure Encrypted Virtualization is an application software.AMD System Management Unit SMU is a system management unit. A buffer error vulnerability exists in...

5.5CVSS6AI score0.00219EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2021/11/12 12:00 a.m.•13 views

AMD 多款产品输入验证错误漏洞

AMD Platform Security Processor and others are products of AMD Corporation.AMD Platform Security Processor is a security processor.AMD Secure Encrypted Virtualization is an application software.AMD System Management Unit SMU is a system management unit. An input validation error vulnerability...

5.5CVSS5.8AI score0.00219EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2021/11/12 12:00 a.m.•14 views

AMD多款产品输入验证错误漏洞

AMD Platform Security Processor and AMD Secure Encrypted Virtualization are both products of AMD Corporation.AMD Platform Security Processor is a security processor.AMD Secure Encrypted Virtualization is a software application. Hardware-accelerated memory encryption to protect data in use. An inp...

7.8CVSS7.4AI score0.00295EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2021/11/12 12:00 a.m.•14 views

AMD Platform Security Processor安全漏洞

AMD Platform Security Processor is a security processor from AMD. A security vulnerability exists in AMD Platform Security Processor. No information about this vulnerability is available at this time, please stay tuned to CNNVD or the vendor announcement...

5.5CVSS5.6AI score0.00247EPSS
SaveExploits0References8
CNNVD
CNNVD
•added 2021/11/12 12:00 a.m.•14 views

AMD 多款产品输入验证错误漏洞

AMD Platform Security Processor, etc. are products of AMD USA. AMD Platform Security Processor is a security processor. AMD Secure Encrypted Virtualization is an application software. Micro Devices System Management Unit AMD SMU, etc. are products of AMD Advanced Micro Devices, Inc. in the U.S...

5.5CVSS5.9AI score0.00219EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2021/11/12 12:00 a.m.•16 views

AMD Platform Security Processor 输入验证错误漏洞

AMD Platform Security Processor is a security processor from AMD, Inc. AMD Platform Security Processor suffers from an input validation error vulnerability that stems from insufficient input validation against discrete TPM commands in the PSP firmware could lead to a potential loss of integrity a...

7.1CVSS7.1AI score0.00225EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2021/11/12 12:00 a.m.•12 views

AMD 多款产品安全漏洞

AMD Platform Security Processor and AMD Secure Encrypted Virtualization are both products of AMD Corporation.AMD Platform Security Processor is a security processor.AMD Secure Encrypted Virtualization is a software application. Hardware-accelerated memory encryption to protect data in use. AMD...

7.8CVSS7.3AI score0.00261EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2021/11/12 12:00 a.m.•14 views

AMD Platform Security Processor命令注入漏洞

HP ProLiant is the intelligent computing foundation for HP America's hybrid cloud, providing unparalleled workload optimization, security and automation, all available as a service. HP ProLiant has a command injection vulnerability that can be exploited by an attacker who can exploit multiple...

5.5CVSS5.6AI score0.00252EPSS
SaveExploits0References4
attackerkb
attackerkb
•added 2021/11/09 8:00 p.m.•8 views

CVE-2021-26321

Insufficient ID command validation in the SEV Firmware may allow a local authenticated attacker to perform a denial of service of the PSP...

5.5CVSS5.6AI score0.00252EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2021/10/01 12:00 a.m.•233 views

AMD Platform Security Processor (PSP) Chipset Driver Information Disclosure (AMD-SB-1009)

The version of the AMD Platform Security Processor PSP chipset driver found on the remote host is prior to 5.17.0.0. It is, therefore, affected by an information disclosure vulnerability. The discretionary access control list DACL may allow low privileged users to open a handle and send requests ...

5.5CVSS5.7AI score0.00517EPSS
SaveExploits0References2
CVE
CVE
•added 2021/09/21 10:49 a.m.•134 views

CVE-2021-26333

CVE-2021-26333 affects the AMD Platform Security Processor (PSP) chipset/driver information disclosure vulnerability. The DACL on the PSP driver may let low-privileged users open a handle and send requests to the driver, potentially leaking data from uninitialized physical pages. Affected product...

5.5CVSS5AI score0.00517EPSS
SaveExploits0References3Affected Software2
Vulnrichment
Vulnrichment
•added 2021/09/21 10:49 a.m.•11 views

CVE-2021-26333 AMD Chipset Driver Information Disclosure Vulnerability

An information disclosure vulnerability exists in AMD Platform Security Processor PSP chipset driver. The discretionary access control list DACL may allow low privileged users to open a handle and send requests to the driver resulting in a potential data leak from uninitialized physical pages...

6AI score0.00517EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2021/09/21 10:49 a.m.•48 views

CVE-2021-26333 AMD Chipset Driver Information Disclosure Vulnerability

An information disclosure vulnerability exists in AMD Platform Security Processor PSP chipset driver. The discretionary access control list DACL may allow low privileged users to open a handle and send requests to the driver resulting in a potential data leak from uninitialized physical pages...

5.2AI score0.00517EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/09/21 12:00 a.m.•1 views

CVE-2021-26333: Exposure of Sensitive Information to an Unauthorized Actor

An information disclosure vulnerability exists in AMD Platform Security Processor PSP chipset driver. The discretionary access control list DACL may allow low privileged users to open a handle and send requests to the driver resulting in a potential data leak from uninitialized physical pages...

5.5CVSS5.7AI score0.00517EPSS
SaveExploits0References3
Rows per page
Query Builder