amd 2nd Gen AMD Ryzen™ Threadripper™ Processor vulnerabilities

Latest amd 2nd Gen AMD Ryzen™ Threadripper™ Processor CVEs

Newest publication first

1. CVE-2023-20558 Insufficient control flow management in AmdCpmOemSmm may allow a privileged attacker to tamper with the SMM handler potentially leading to an escalation of privileges.

   Published 2023-03-23

   High·CVSS 8.8 EPSS 0.67%

   Insufficient control flow management in AmdCpmOemSmm may allow a privileged attacker to tamper with the SMM handler potentially leading to an escalation of privileges.

2. CVE-2023-20559 Insufficient control flow management in AmdCpmGpioInitSmm may allow a privileged attacker to tamper with the SMM handler potentially leading to escalation of privileges.

   Published 2023-03-23

   High·CVSS 8.8 EPSS 0.67%

   Insufficient control flow management in AmdCpmGpioInitSmm may allow a privileged attacker to tamper with the SMM handler potentially leading to escalation of privileges.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.