7.5

CVE-2022-23818

Insufficient input validation on the model
specific register: VM_HSAVE_PA may potentially lead to loss of SEV-SNP guest
memory integrity.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Amd ≫ Epyc 72f3 Firmware Version milanpi_1.0.0.9
   Amd ≫ Epyc 72f3 Version -
Amd ≫ Epyc 7313 Firmware Version milanpi_1.0.0.9
   Amd ≫ Epyc 7313 Version -
Amd ≫ Epyc 7313p Firmware Version milanpi_1.0.0.9
   Amd ≫ Epyc 7313p Version -
Amd ≫ Epyc 7343 Firmware Version milanpi_1.0.0.9
   Amd ≫ Epyc 7343 Version -
Amd ≫ Epyc 7373x Firmware Version milanpi_1.0.0.9
   Amd ≫ Epyc 7373x Version -
Amd ≫ Epyc 73f3 Firmware Version milanpi_1.0.0.9
   Amd ≫ Epyc 73f3 Version -
Amd ≫ Epyc 7413 Firmware Version milanpi_1.0.0.9
   Amd ≫ Epyc 7413 Version -
Amd ≫ Epyc 7443 Firmware Version milanpi_1.0.0.9
   Amd ≫ Epyc 7443 Version -
Amd ≫ Epyc 7443p Firmware Version milanpi_1.0.0.9
   Amd ≫ Epyc 7443p Version -
Amd ≫ Epyc 7453 Firmware Version milanpi_1.0.0.9
   Amd ≫ Epyc 7453 Version -
Amd ≫ Epyc 7473x Firmware Version milanpi_1.0.0.9
   Amd ≫ Epyc 7473x Version -
Amd ≫ Epyc 74f3 Firmware Version milanpi_1.0.0.9
   Amd ≫ Epyc 74f3 Version -
Amd ≫ Epyc 7513 Firmware Version milanpi_1.0.0.9
   Amd ≫ Epyc 7513 Version -
Amd ≫ Epyc 7543 Firmware Version milanpi_1.0.0.9
   Amd ≫ Epyc 7543 Version -
Amd ≫ Epyc 7543p Firmware Version milanpi_1.0.0.9
   Amd ≫ Epyc 7543p Version -
Amd ≫ Epyc 7573x Firmware Version milanpi_1.0.0.9
   Amd ≫ Epyc 7573x Version -
Amd ≫ Epyc 75f3 Firmware Version milanpi_1.0.0.9
   Amd ≫ Epyc 75f3 Version -
Amd ≫ Epyc 7643 Firmware Version milanpi_1.0.0.9
   Amd ≫ Epyc 7643 Version -
Amd ≫ Epyc 7663 Firmware Version milanpi_1.0.0.9
   Amd ≫ Epyc 7663 Version -
Amd ≫ Epyc 7713 Firmware Version milanpi_1.0.0.9
   Amd ≫ Epyc 7713 Version -
Amd ≫ Epyc 7713p Firmware Version milanpi_1.0.0.9
   Amd ≫ Epyc 7713p Version -
Amd ≫ Epyc 7763 Firmware Version milanpi_1.0.0.9
   Amd ≫ Epyc 7763 Version -
Amd ≫ Epyc 7773x Firmware Version milanpi_1.0.0.9
   Amd ≫ Epyc 7773x Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.5% 0.39
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CISA-ADP 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3001
Vendor Advisory