Epyc 7001 vulnerabilitiesRanked by how likely they are to be used.

Product0 versions
The short answer

Epyc 7001 is made by Amd. We track 27 published vulnerabilities listed under that exact name, across 0 versions. None of them is on the list of flaws known to be exploited today. Amd lists newer releases under their own names, such as Epyc 7001 Firmware, so check those pages too.

See the riskiest flaws

We keep watching the known-exploited list.

Other names

Is Epyc 7001 listed under other names? Yes.

Amd also lists Epyc 7001 under more specific names, such as Epyc 7001 Firmware. Flaws listed only under those names are counted on their own pages, not here. If you run one of these, open its page for its own exploited flaws.

Known exploited

Which Epyc 7001 vulnerabilities are being exploited?

This is the list that matters most: flaws criminals are using now.

None of Epyc 7001's published vulnerabilities is on the list of flaws known to be exploited today. We keep watching that list.

Exploit likelihood

Which Epyc 7001 flaws are most likely to be used?

Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.

50% or more10% to 49%Under 10%
  1. 3.9%

    Mis-trained branch predictions for return instructions may allow arbitrary speculative code execution under certain microarchitecture-dependent conditions.

    CVSS6.5Published12 Jul 2022
  2. 1.2%

    A potential vulnerability in some AMD processors using frequency scaling may allow an authenticated attacker to execute a timing attack to potentially enable information disclosure.

    CVSS6.5Published15 Jun 2022
  3. 1.0%

    A potential denial of service (DoS) vulnerability exists in the integrated chipset that may allow a malicious attacker to hang the system when it is rebooted.

    CVSS7.5Published11 Jun 2021
  4. 1.0%

    Improper or unexpected behavior of the INVD instruction in some AMD CPUs may allow an attacker with a malicious hypervisor to affect cache line write-back behavior of the CPU leading to a potential loss of guest...

    CVSS6.5Published14 Nov 2023
  5. 0.8%

    Aliases in the branch predictor may cause some AMD processors to predict the wrong branch type potentially leading to information disclosure.

    CVSS6.5Published14 Jul 2022
  6. 0.6%

    IBPB may not prevent return branch predictions from being specified by pre-IBPB branch targets leading to a potential information disclosure.

    CVSS5.5Published9 Nov 2022
  7. 0.6%

    Improper syscall input validation in the ASP Bootloader may allow a privileged attacker to read memory out-of-bounds, potentially leading to a denial-of-service.

    CVSS6.5Published11 Jan 2023
  8. 0.5%

    Insufficient DRAM address validation in System Management Unit (SMU) may allow an attacker to read/write from/to an invalid DRAM address, potentially resulting in denial-of-service.

    CVSS7.5Published14 Nov 2023
  9. 0.4%

    A TOCTOU in ASP bootloader may allow an attacker to tamper with the SPI ROM following data read to memory potentially resulting in S3 data corruption and information disclosure.

    CVSS7.4Published9 May 2023
  10. 0.3%

    An attacker with access to a malicious hypervisor may be able to infer data values used in a SEV guest on AMD CPUs by monitoring ciphertext values over time.

    CVSS6.5Published11 May 2022
Precursor Intelligence

Running Epyc 7001? We'll keep checking.

Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.

  1. Tell us what you runPick your software from a list, or let us work it out from your website.
  2. We match it to every flawOver 400,000 published flaws, checked against your list.
  3. Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
  4. Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.

Free plan, no card needed. Nothing to install.

FAQ

Common questions, answered plainly.

Something else? Talk to the team →

We track 27 published vulnerabilities listed under the name Epyc 7001, across 0 versions.

None of Epyc 7001's vulnerabilities is on the list of flaws known to be exploited today.

Amd also lists Epyc 7001 under more specific names, such as Epyc 7001 Firmware. Flaws listed only under those names are counted on their own pages, not here. Open the release you run to see its own list.

Create a Precursor Intelligence account and track Epyc 7001. We match it against every published flaw, give each one a risk score from 0 to 100 and keep watching, so you hear about new ones as soon as we know, by email, in the app or by webhook.