An observable timing discrepancy in the ASP could allow a privileged attacker to perform a brute-force attack against the hash message authentication code, allowing arbitrary message input, potentially leading to a loss of data integrity.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
AMD Ryzen™ 3000 Series Desktop Processors
Vendor
AMD
Product
AMD Ryzen™ 3000 Series Desktop Processors
Platforms
Unknown
Default status
affected
AMD Ryzen™ 3000 Series Desktop Processors · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
ComboAM4 1.0.0.E
unaffected
Unavailable
Unavailable
Unavailable
None listed
ComboAM4v2PI 1.2.0.CA
unaffected
Unavailable
Unavailable
Unavailable
None listed
AMD Ryzen™ 5000 Series Desktop Processors
Vendor
AMD
Product
AMD Ryzen™ 5000 Series Desktop Processors
Platforms
Unknown
Default status
affected
AMD Ryzen™ 5000 Series Desktop Processors · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
ComboAM4v2PI 1.2.0.CA
unaffected
Unavailable
Unavailable
Unavailable
None listed
AMD Ryzen™ Threadripper™ 3000 Series Processors
Vendor
AMD
Product
AMD Ryzen™ Threadripper™ 3000 Series Processors
Platforms
Unknown
Default status
affected
AMD Ryzen™ Threadripper™ 3000 Series Processors · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
CastlePeakPI-SP3r3 1.0.0.C
unaffected
Unavailable
Unavailable
Unavailable
None listed
AMD Ryzen™ Threadripper™ PRO 3000WX Series Processors
Vendor
AMD
Product
AMD Ryzen™ Threadripper™ PRO 3000WX Series Processors
Platforms
Unknown
Default status
affected
AMD Ryzen™ Threadripper™ PRO 3000WX Series Processors · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
CastlePeakWSPI-sWRX8 1.0.0.E
unaffected
Unavailable
Unavailable
Unavailable
None listed
AMD Ryzen™ Threadripper™ PRO 5000 WX-Series Processors
Vendor
AMD
Product
AMD Ryzen™ Threadripper™ PRO 5000 WX-Series Processors
Platforms
Unknown
Default status
affected
AMD Ryzen™ Threadripper™ PRO 5000 WX-Series Processors · Scoped product and version facts