Insufficient Verification of Data Authenticity in AGESA™ may allow an attacker to update SPI ROM data potentially resulting in denial of service or privilege escalation.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
AMD Ryzen™ 3000 Series Desktop Processors
Vendor
AMD
Product
AMD Ryzen™ 3000 Series Desktop Processors
Platforms
Unknown
Default status
affected
AMD Ryzen™ 3000 Series Desktop Processors · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
ComboAM4v2 1.2.0.B
unaffected
Unavailable
Unavailable
Unavailable
None listed
AMD Ryzen™ 5000 Series Desktop Processors
Vendor
AMD
Product
AMD Ryzen™ 5000 Series Desktop Processors
Platforms
Unknown
Default status
affected
AMD Ryzen™ 5000 Series Desktop Processors · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
ComboAM4v2v 1.2.0.B
unaffected
Unavailable
Unavailable
Unavailable
None listed
AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics
Vendor
AMD
Product
AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics
Platforms
Unknown
Default status
affected
AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
ComboAM4v2 1.2.0.B
unaffected
Unavailable
Unavailable
Unavailable
None listed
AMD Ryzen™ 7000 Series Processors
Vendor
AMD
Product
AMD Ryzen™ 7000 Series Processors
Platforms
Unknown
Default status
affected
AMD Ryzen™ 7000 Series Processors · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
ComboAM5 1.0.0.7b
unaffected
Unavailable
Unavailable
Unavailable
None listed
AMD Ryzen™ 4000 Series Desktop Processors with Radeon™ Graphics
Vendor
AMD
Product
AMD Ryzen™ 4000 Series Desktop Processors with Radeon™ Graphics
Platforms
Unknown
Default status
affected
AMD Ryzen™ 4000 Series Desktop Processors with Radeon™ Graphics · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
ComboAM4v2 1.2.0.B
unaffected
Unavailable
Unavailable
Unavailable
None listed
AMD Ryzen™ Threadripper™ PRO 5000WX Processors
Vendor
AMD
Product
AMD Ryzen™ Threadripper™ PRO 5000WX Processors
Platforms
Unknown
Default status
affected
AMD Ryzen™ Threadripper™ PRO 5000WX Processors · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
ChagallWSPI-sWRX8 1.0.0.7
unaffected
Unavailable
Unavailable
Unavailable
None listed
AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics
Vendor
AMD
Product
AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics
Platforms
Unknown
Default status
affected
AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
MendocinoPI-FT6 1.0.0.6
unaffected
Unavailable
Unavailable
Unavailable
None listed
AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics
Vendor
AMD
Product
AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics
Platforms
Unknown
Default status
affected
AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
RembrandtPI-FP7 1.0.0.9b
unaffected
Unavailable
Unavailable
Unavailable
None listed
AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics
Vendor
AMD
Product
AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics
Platforms
Unknown
Default status
affected
AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
RembrandtPI-FP7 1.0.0.9b
unaffected
Unavailable
Unavailable
Unavailable
None listed
AMD Ryzen™ 7040 Series Processors with Radeon™ Graphics
Vendor
AMD
Product
AMD Ryzen™ 7040 Series Processors with Radeon™ Graphics
Platforms
Unknown
Default status
affected
AMD Ryzen™ 7040 Series Processors with Radeon™ Graphics · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
PhoenixPI-FP8-FP7 1.0.0.2
unaffected
Unavailable
Unavailable
Unavailable
None listed
AMD Ryzen™ 7045 Series Mobile Processors
Vendor
AMD
Product
AMD Ryzen™ 7045 Series Mobile Processors
Platforms
Unknown
Default status
affected
AMD Ryzen™ 7045 Series Mobile Processors · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
DragonRangeFL1PI 1.0.0.3a
unaffected
Unavailable
Unavailable
Unavailable
None listed
AMD Ryzen™ Embedded 5000
Vendor
AMD
Product
AMD Ryzen™ Embedded 5000
Platforms
Unknown
Default status
affected
AMD Ryzen™ Embedded 5000 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
EmbAM4PI 1.0.0.4
unaffected
Unavailable
Unavailable
Unavailable
None listed
AMD Ryzen™ Embedded V3000
Vendor
AMD
Product
AMD Ryzen™ Embedded V3000
Platforms
Unknown
Default status
affected
AMD Ryzen™ Embedded V3000 · Scoped product and version facts