Amd Epyc Server Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Amd Epyc Server Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2018-8930 — CVSS 9.0 (critical): The AMD EPYC Server, Ryzen, Ryzen Pro, and Ryzen Mobile processor chips have insufficient enforcement of Hardware Validated Boot, aka…
• CVE-2018-8933 — CVSS 9.0 (critical): The AMD EPYC Server processor chips have insufficient access control for protected memory regions, aka FALLOUT-1, FALLOUT-2, and FALLOUT-3.
• CVE-2018-8936 — CVSS 9.0 (critical): The AMD EPYC Server, Ryzen, Ryzen Pro, and Ryzen Mobile processor chips allow Platform Security Processor (PSP) privilege escalation.