CVE-2024-21980

Yüksek

Açıklama

SNP firmware içindeki yazma işlemlerinin uygun şekilde kısıtlanmaması, kötü niyetli bir hypervisor'ın potansiyel olarak bir konuğun belleğini veya UMC seed değerini üzerine yazmasına neden olarak gizlilik ve bütünlük kaybına yol açabilir.

ÖnemYüksek
CVSS7.9
İstismar olasılığı—
ÜrünAmd Epyc 7203 Firmware
Yayın5 Ağu 2024
İlk görülme5 Ağu 2024

Nasıl düzeltilir

Güncelleyin
  • amd epyc_7203_firmwaremilanpi_1.0.0.d ya da sonraki bir sürüm
  • amd epyc_7203p_firmwaremilanpi_1.0.0.d ya da sonraki bir sürüm
  • amd epyc_72f3_firmwaremilanpi_1.0.0.d ya da sonraki bir sürüm
  • amd epyc_7303_firmwaremilanpi_1.0.0.d ya da sonraki bir sürüm
  • amd epyc_7303p_firmwaremilanpi_1.0.0.d ya da sonraki bir sürüm
  • amd epyc_7313_firmwaremilanpi_1.0.0.d ya da sonraki bir sürüm
  • amd epyc_7313p_firmwaremilanpi_1.0.0.d ya da sonraki bir sürüm
  • amd epyc_7343_firmwaremilanpi_1.0.0.d ya da sonraki bir sürüm
  • amd epyc_73f3_firmwaremilanpi_1.0.0.d ya da sonraki bir sürüm
  • amd epyc_7373x_firmwaremilanpi_1.0.0.d ya da sonraki bir sürüm
  • amd epyc_7413_firmwaremilanpi_1.0.0.d ya da sonraki bir sürüm
  • amd epyc_7443_firmwaremilanpi_1.0.0.d ya da sonraki bir sürüm

Etkilenen ürünler

ÜrünEtkilenen sürümlerDüzeltildiği sürüm
amd epyc_7203_firmwarev < milanpi_1.0.0.dmilanpi_1.0.0.d
amd epyc_7203p_firmwarev < milanpi_1.0.0.dmilanpi_1.0.0.d
amd epyc_72f3_firmwarev < milanpi_1.0.0.dmilanpi_1.0.0.d
amd epyc_7303_firmwarev < milanpi_1.0.0.dmilanpi_1.0.0.d
amd epyc_7303p_firmwarev < milanpi_1.0.0.dmilanpi_1.0.0.d
amd epyc_7313_firmwarev < milanpi_1.0.0.dmilanpi_1.0.0.d
amd epyc_7313p_firmwarev < milanpi_1.0.0.dmilanpi_1.0.0.d
amd epyc_7343_firmwarev < milanpi_1.0.0.dmilanpi_1.0.0.d
amd epyc_73f3_firmwarev < milanpi_1.0.0.dmilanpi_1.0.0.d
amd epyc_7373x_firmwarev < milanpi_1.0.0.dmilanpi_1.0.0.d
amd epyc_7413_firmwarev < milanpi_1.0.0.dmilanpi_1.0.0.d
amd epyc_7443_firmwarev < milanpi_1.0.0.dmilanpi_1.0.0.d
amd epyc_7443p_firmwarev < milanpi_1.0.0.dmilanpi_1.0.0.d
amd epyc_74f3_firmwarev < milanpi_1.0.0.dmilanpi_1.0.0.d
amd epyc_7453_firmwarev < milanpi_1.0.0.dmilanpi_1.0.0.d
amd epyc_7473x_firmwarev < milanpi_1.0.0.dmilanpi_1.0.0.d
amd epyc_7513_firmwarev < milanpi_1.0.0.dmilanpi_1.0.0.d
amd epyc_7543_firmwarev < milanpi_1.0.0.dmilanpi_1.0.0.d
amd epyc_7543p_firmwarev < milanpi_1.0.0.dmilanpi_1.0.0.d
amd epyc_75f3_firmwarev < milanpi_1.0.0.dmilanpi_1.0.0.d
amd epyc_7573x_firmwarev < milanpi_1.0.0.dmilanpi_1.0.0.d
amd epyc_7643_firmwarev < milanpi_1.0.0.dmilanpi_1.0.0.d
amd epyc_7773x_firmwarev < milanpi_1.0.0.dmilanpi_1.0.0.d
amd epyc_7643p_firmwarev < milanpi_1.0.0.dmilanpi_1.0.0.d
amd epyc_7663_firmwarev < milanpi_1.0.0.dmilanpi_1.0.0.d
amd epyc_7663p_firmwarev < milanpi_1.0.0.dmilanpi_1.0.0.d
amd epyc_7713_firmwarev < milanpi_1.0.0.dmilanpi_1.0.0.d
amd epyc_7713p_firmwarev < milanpi_1.0.0.dmilanpi_1.0.0.d
amd epyc_7763_firmwarev < milanpi_1.0.0.dmilanpi_1.0.0.d
amd epyc_8024pn_firmwarev < genoapi_1.0.0.cgenoapi_1.0.0.c
amd epyc_8024p_firmwarev < genoapi_1.0.0.cgenoapi_1.0.0.c
amd epyc_8124pn_firmwarev < genoapi_1.0.0.cgenoapi_1.0.0.c
amd epyc_8124p_firmwarev < genoapi_1.0.0.cgenoapi_1.0.0.c
amd epyc_8224pn_firmwarev < genoapi_1.0.0.cgenoapi_1.0.0.c
amd epyc_8224p_firmwarev < genoapi_1.0.0.cgenoapi_1.0.0.c
amd epyc_8324pn_firmwarev < genoapi_1.0.0.cgenoapi_1.0.0.c
amd epyc_8324p_firmwarev < genoapi_1.0.0.cgenoapi_1.0.0.c
amd epyc_8434pn_firmwarev < genoapi_1.0.0.cgenoapi_1.0.0.c
amd epyc_8434p_firmwarev < genoapi_1.0.0.cgenoapi_1.0.0.c
amd epyc_8534pn_firmwarev < genoapi_1.0.0.cgenoapi_1.0.0.c
amd epyc_8534p_firmwarev < genoapi_1.0.0.cgenoapi_1.0.0.c
amd epyc_9734_firmwarev < genoapi_1.0.0.cgenoapi_1.0.0.c
amd epyc_9754s_firmwarev < genoapi_1.0.0.cgenoapi_1.0.0.c
amd epyc_9754_firmwarev < genoapi_1.0.0.cgenoapi_1.0.0.c
amd epyc_9184x_firmwarev < genoapi_1.0.0.cgenoapi_1.0.0.c
amd epyc_9384x_firmwarev < genoapi_1.0.0.cgenoapi_1.0.0.c
amd epyc_9684x_firmwarev < genoapi_1.0.0.cgenoapi_1.0.0.c
amd epyc_9124_firmwarev < genoapi_1.0.0.cgenoapi_1.0.0.c
amd epyc_9174f_firmwarev < genoapi_1.0.0.cgenoapi_1.0.0.c
amd epyc_9224_firmwarev < genoapi_1.0.0.cgenoapi_1.0.0.c
amd epyc_9254_firmwarev < genoapi_1.0.0.cgenoapi_1.0.0.c
amd epyc_9274f_firmwarev < genoapi_1.0.0.cgenoapi_1.0.0.c
amd epyc_9334_firmwarev < genoapi_1.0.0.cgenoapi_1.0.0.c
amd epyc_9354_firmwarev < genoapi_1.0.0.cgenoapi_1.0.0.c
amd epyc_9354p_firmwarev < genoapi_1.0.0.cgenoapi_1.0.0.c
amd epyc_9374f_firmwarev < genoapi_1.0.0.cgenoapi_1.0.0.c
amd epyc_9454_firmwarev < genoapi_1.0.0.cgenoapi_1.0.0.c
amd epyc_9454p_firmwarev < genoapi_1.0.0.cgenoapi_1.0.0.c
amd epyc_9474f_firmwarev < genoapi_1.0.0.cgenoapi_1.0.0.c
amd epyc_9534_firmwarev < genoapi_1.0.0.cgenoapi_1.0.0.c
amd epyc_9554_firmwarev < genoapi_1.0.0.cgenoapi_1.0.0.c
amd epyc_9554p_firmwarev < genoapi_1.0.0.cgenoapi_1.0.0.c
amd epyc_9634_firmwarev < genoapi_1.0.0.cgenoapi_1.0.0.c
amd epyc_9654_firmwarev < genoapi_1.0.0.cgenoapi_1.0.0.c
amd epyc_9654p_firmwarev < genoapi_1.0.0.cgenoapi_1.0.0.c
amd epyc_embedded_7313_firmwarev < embmilanpi-sp3_1.0.0.9embmilanpi-sp3_1.0.0.9
amd epyc_embedded_7313p_firmwarev < embmilanpi-sp3_1.0.0.9embmilanpi-sp3_1.0.0.9
amd epyc_embedded_7413_firmwarev < embmilanpi-sp3_1.0.0.9embmilanpi-sp3_1.0.0.9
amd epyc_embedded_7443_firmwarev < embmilanpi-sp3_1.0.0.9embmilanpi-sp3_1.0.0.9
amd epyc_embedded_7443p_firmwarev < embmilanpi-sp3_1.0.0.9embmilanpi-sp3_1.0.0.9
amd epyc_embedded_7543_firmwarev < embmilanpi-sp3_1.0.0.9embmilanpi-sp3_1.0.0.9
amd epyc_embedded_7543p_firmwarev < embmilanpi-sp3_1.0.0.9embmilanpi-sp3_1.0.0.9
amd epyc_embedded_7643_firmwarev < embmilanpi-sp3_1.0.0.9embmilanpi-sp3_1.0.0.9
amd epyc_embedded_7713_firmwarev < embmilanpi-sp3_1.0.0.9embmilanpi-sp3_1.0.0.9
amd epyc_embedded_7713p_firmwarev < embmilanpi-sp3_1.0.0.9embmilanpi-sp3_1.0.0.9
amd epyc_embedded_9124_firmwarev < embgenoapi-sp5_1.0.0.7embgenoapi-sp5_1.0.0.7
amd epyc_embedded_9254_firmwarev < embgenoapi-sp5_1.0.0.7embgenoapi-sp5_1.0.0.7
amd epyc_embedded_9354_firmwarev < embgenoapi-sp5_1.0.0.7embgenoapi-sp5_1.0.0.7
amd epyc_embedded_9354p_firmwarev < embgenoapi-sp5_1.0.0.7embgenoapi-sp5_1.0.0.7
amd epyc_embedded_9454_firmwarev < embgenoapi-sp5_1.0.0.7embgenoapi-sp5_1.0.0.7
amd epyc_embedded_9454p_firmwarev < embgenoapi-sp5_1.0.0.7embgenoapi-sp5_1.0.0.7
amd epyc_embedded_9534_firmwarev < embgenoapi-sp5_1.0.0.7embgenoapi-sp5_1.0.0.7
amd epyc_embedded_9554_firmwarev < embgenoapi-sp5_1.0.0.7embgenoapi-sp5_1.0.0.7
amd epyc_embedded_9554p_firmwarev < embgenoapi-sp5_1.0.0.7embgenoapi-sp5_1.0.0.7
amd epyc_embedded_9654_firmwarev < embgenoapi-sp5_1.0.0.7embgenoapi-sp5_1.0.0.7
amd epyc_embedded_9654p_firmwarev < embgenoapi-sp5_1.0.0.7embgenoapi-sp5_1.0.0.7

Sürümünüzü kontrol edin

Ürünü seçin ve kullandığınız sürümü yazın; sürümün etkilenen aralıkta olup olmadığını görün.

Intelligence 360 paketinde

Attack Surface Management

Alan adlarınıza bağlı varlıkları, bu varlıklarda çalışan teknolojileri ve bilinen zafiyetleri tek listede görün.

CVE-2024-21980 · Amd Epyc 7203 Firmware · Dark Radar