description: A potential vulnerability exists in AMD Platform Security Processor (PSP) that may allow an attacker to zero any privileged register on the System Management Network which may lead to bypassing SPI ROM protections.
problem types: CWE-20 Improper Input Validation
affected:
{
product: 2nd Gen AMD EPYC™
vendor: AMD
versions:
lessThan: RomePI-SP3_1.0.0.C, status: affected, version: unspecified, versionType: custom
}
{
product: 3rd Gen AMD EPYC™
vendor: AMD
versions:
lessThan: MilanPI-SP3_1.0.0.4, status: affected, version: unspecified, versionType: custom
}
