CVE-2018-8936

The AMD EPYC Server, Ryzen, Ryzen Pro, and Ryzen Mobile processor chips allow Platform Security Processor (PSP) privilege escalation

published March 22, 2018

CVSS
—
EPSS
2%
Percentile
77.5
In the wild
Unconfirmed
What it is

⚠️ A privilege escalation flaw in AMD EPYC and Ryzen processors could potentially give attackers more power than you intended — like giving a guest the master key to your entire hotel! 🔑 Think of your computer’s processor like a hotel where guests have different access levels. If someone could sneak a master key into the system, they could access all rooms, not just the ones booked for them. This flaw could allow an authorized user to elevate their privileges, potentially gaining control over sensitive areas of the system. The consequences could range from unauthorized data access to system disruptions, depending on how the attacker chooses to exploit their newfound powers.

Put simply

Think of your computer’s processor like a hotel where guests have different access levels. If someone could sneak a master key into the system, they could access all rooms, not just the ones booked for them. The AMD EPYC Server and Ryzen processors have a vulnerability in the Platform Security Processor (PSP) that allows attackers to escalate their privileges, giving them access to parts of the system they shouldn't have.

What to do

This flaw could allow an authorized user to elevate their privileges, potentially gaining control over sensitive areas of the system. The consequences could range from unauthorized data access to system disruptions, depending on how the attacker chooses to exploit their newfound powers. To defend against this potential vulnerability, ensure your firmware is updated with the latest security patches provided by AMD. Regularly audit your systems for unauthorized access and consider additional monitoring for suspicious activity. You've got this! Stay vigilant and keep your systems secure! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01750 · 77.5th percentile
Published
2018-03-22T14:00Z
EPSS history
Timeline
  • 22 MAR 14:00Z
    The AMD EPYC Server, Ryzen, Ryzen Pro, and Ryzen Mobile processor chips allow Platform Security Processor (PSP) privilege escalation
    cvelistv5