Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-mwrh-fvw2-28c5

Опубликовано: 16 апр. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 5.9

Описание

A missing lock verification in AMD Secure Processor (ASP) firmware may permit a locally authenticated attacker with administrative privileges to alter MMIO routing on some Zen 5-based products, potentially compromising guest system integrity.

A missing lock verification in AMD Secure Processor (ASP) firmware may permit a locally authenticated attacker with administrative privileges to alter MMIO routing on some Zen 5-based products, potentially compromising guest system integrity.

EPSS

Процентиль: 1%
0.00108
Низкий

5.9 Medium

CVSS4

Дефекты

CWE-414

Связанные уязвимости

CVSS3: 6
redhat
4 месяца назад

A missing lock verification in AMD Secure Processor (ASP) firmware may permit a locally authenticated attacker with administrative privileges to alter MMIO routing on some Zen 5-based products, potentially compromising guest system integrity.

nvd
4 месяца назад

A missing lock verification in AMD Secure Processor (ASP) firmware may permit a locally authenticated attacker with administrative privileges to alter MMIO routing on some Zen 5-based products, potentially compromising guest system integrity.

EPSS

Процентиль: 1%
0.00108
Низкий

5.9 Medium

CVSS4

Дефекты

CWE-414