amd epyc 7303p firmware

Name: amd epyc 7303p firmware
Brand: amd

productUS

cpe:2.3:o:amd:epyc_7303p_firmware:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

by severity

1critical6high10medium1low

updated 2026-10-27

vulnerabilities (18)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2024-21978US	high7.9	0.49% (42nd)	Exploit	milanpi_1.0.0.d	2024-08-05	< milanpi_1.0.0.d
CVE-2024-21980US	high7.9	0.45% (39th)	Exploit	milanpi_1.0.0.d	2024-08-05	< milanpi_1.0.0.d
CVE-2023-31355US	medium6.0	0.44% (38th)	Exploit	milanpi_1.0.0.d	2024-08-05	< milanpi_1.0.0.d
CVE-2023-31346US	medium6.0	0.31% (24th)	Exploit	milanpi_1.0.0.c	2024-02-13	< milanpi_1.0.0.c
CVE-2023-20573US	low3.2	0.29% (21st)	Exploit	no fix	2024-01-11	—
CVE-2023-20592US	medium6.5	1.02% (63rd)	—	milanpi_1.0.0.c	2023-11-14	< milanpi_1.0.0.c
CVE-2021-46774US	high7.5	0.51% (43rd)	—	milanpi_1.0.0.b	2023-11-14	< milanpi_1.0.0.b
CVE-2023-20533US	high7.5	0.50% (43rd)	—	milanpi_1.0.0.5	2023-11-14	< milanpi_1.0.0.5
CVE-2023-31347US	medium4.9	0.46% (40th)	—	milanpi_1.0.0.c	2024-02-13	< milanpi_1.0.0.c
CVE-2021-26345US	medium4.9	0.43% (38th)	—	milanpi_1.0.0.a	2023-11-14	< milanpi_1.0.0.a
CVE-2023-20566US	high7.5	0.37% (30th)	—	milanpi_1.0.0.b	2023-11-14	< milanpi_1.0.0.b
CVE-2022-23830US	medium5.3	0.35% (28th)	—	milanpi_1.0.0.a	2023-11-14	< milanpi_1.0.0.a
CVE-2023-20526US	medium4.6	0.31% (24th)	—	milanpi_1.0.0.5	2023-11-14	< milanpi_1.0.0.5
CVE-2023-20591US	critical10.0	0.30% (22nd)	—	milanpi_1.0.0.b	2024-08-13	< milanpi_1.0.0.b
CVE-2023-20521US	medium5.7	0.26% (18th)	—	milanpi_1.0.0.7	2023-11-14	< milanpi_1.0.0.7
CVE-2023-20584US	medium6.0	0.19% (8th)	—	milanpi_1.0.0.b	2024-08-13	< milanpi_1.0.0.b
CVE-2021-26344US	high8.2	0.16% (5th)	—	milanpi_1.0.0.5	2024-08-13	< milanpi_1.0.0.5
CVE-2023-20578US	medium6.4	0.12% (2nd)	—	milanpi_1.0.0.5	2024-08-13	< milanpi_1.0.0.5

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer3 CVEs
CWE-20Improper Input Validation3 CVEs
CWE-787Out-of-bounds Write3 CVEs
CWE-1234Hardware Internal or Debug Modes Allow Override of Locks2 CVEs
CWE-367Time-of-check Time-of-use (TOCTOU) Race Condition2 CVEs
CWE-125Out-of-bounds Read1 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor1 CVEs
CWE-221Information Loss or Omission1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE18 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan