AMD RomArmor Missing Authorization Vulnerability Allowing Bypass of ROM Protections

A vulnerability exists in AMD RomArmor due to missing authorization, which could enable an attacker to bypass ROMArmor protections when the system resumes from standby. This flaw may lead to a breach of confidentiality and integrity.

Impact

Exploitation of this vulnerability could result in unauthorized access to ROMArmor protections, potentially allowing for malicious modifications or access to sensitive data.

Remediation

Users are advised to update to the latest Platform Initialization (PI) firmware version. Specific update instructions can be obtained from the Original Equipment Manufacturers (OEM) for the AMD product in use.