CVE-2024-21965

highpriority · track · 0DE

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

— EPSS

CVSS 7.4 · high

Is it mine?

9 products

Who says so?

2 sources

cnnvd · cert_bund

中文Shown in its original language — a full translation is planned for a future version.

AMD EPYC是美国超威半导体（AMD）公司的一款高性能服务器处理器。 AMD EPYC存在安全漏洞，该漏洞源于多个漏洞可能被攻击者利用。

cvss

Technical severity, 0–10. One row per scoring source.

7.4

010

base score 0–10 · higher = more severe · hover a vector to decode

v3.17.4highCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · grimoire (LLM-derived)LLM-inferred

The CWE weakness classes this flaw belongs to.

No weakness (CWE) mapping recorded.

Products and version ranges known to be affected.

AMD Prozessor EPYCall versionscert_bundDEcpe:/h:amd:amd_processor:epyc
AMD Prozessor EPYC 7272 CPU on SEVall versionscert_bundDEcpe:/h:amd:amd_processor:epyc_7272_cpu_on_sev
AMD Prozessor Ryzenall versionscert_bundDEcpe:/h:amd:amd_processor:ryzen
Debian Linuxall versionscert_bundDEcpe:/o:debian:debian_linux:-
Dell PowerEdgeall versionscert_bundDEcpe:/h:dell:poweredge:-
HP Computerall versionscert_bundDEcpe:/h:hp:computer:-
Lenovo Computerall versionscert_bundDEcpe:/h:lenovo:computer:-
Oracle Linuxall versionscert_bundDEcpe:/o:oracle:linux:-
Ubuntu Linuxall versionscert_bundDEcpe:/o:canonical:ubuntu_linux:-

Vendor and ecosystem advisories describing this.

WID-SEC-W-2025-1770AMD Prozessoren: Mehrere SchwachstellenDeutsch2025-08-12csaf · cert_bundDE
Ein Angreifer kann mehrere Schwachstellen in AMD Prozessoren ausnutzen, um Sicherheitsmaßnahmen zu umgehen, erweiterte Privilegien zu erlangen, beliebigen Code auszuführen, einen Denial-of-Service-Zustand zu verursachen, Daten zu manipulieren, vertrauliche Informationen offenzulegen oder nicht näher spezifizierte Angriffe durchzuführen.

Other names and identifiers for this entity.

Which sources assert this record, and when.

published 2025-08-13modified 2026-08-20

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.