AMD EPYC and Ryzen Processors Improper Access Control Vulnerability in On-Chip Debug Interface

A vulnerability exists in an on-chip debug interface of AMD EPYC and Ryzen processors, allowing a privileged attacker to enable the debug interface. This could potentially lead to a compromise of data confidentiality or integrity. The issue arises from improper access control, which could be exploited by an attacker with administrative privileges.

Impact

Exploitation of this vulnerability could result in unauthorized access to the debug interface, allowing for potential manipulation or interception of data, thereby compromising data confidentiality or integrity.

Remediation

Users are advised to update to the latest Platform Initialization (PI) or Secure Encrypted Virtualization (SEV) firmware version. For AMD EPYC processors, the specific update details can be found in the AMD Security Bulletin AMD-SB-3023. AMD Ryzen processors can refer to the AMD Security Bulletin AMD-SB-4013 for update instructions.