CVE-2018-8930: Critical severity AMD Ryzen Mobile Firmware vulnerability
Published Mar 22, 2018
·Updated
The AMD EPYC Server, Ryzen, Ryzen Pro, and Ryzen Mobile processor chips have insufficient enforcement of Hardware Validated Boot, aka MASTERKEY-1, MASTERKEY-2, and MASTERKEY-3.
Affected Software
16 affected components
AMD Ryzen Mobile Firmware
AMD Ryzen Mobile
AMD Ryzen Pro Firmware
AMD Ryzen Pro
AMD Epyc Server Firmware
AMD EPYC Server
AMD Ryzen Firmware
AMD Ryzen
All of the following
AMD Ryzen Mobile Firmware
AMD Ryzen Mobile
All of the following
AMD Ryzen Pro Firmware
AMD Ryzen Pro
All of the following
AMD Epyc Server Firmware
AMD EPYC Server
All of the following
AMD Ryzen Firmware
AMD Ryzen
Event History
Mar 22, 2018
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Data Sourced
via NVD·02:29 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2018-8930?
CVE-2018-8930 has been classified as a high severity vulnerability due to its impact on Hardware Validated Boot enforcement.
2
How do I fix CVE-2018-8930?
To address CVE-2018-8930, users must update their AMD firmware to the latest version provided by AMD.
3
Which products are affected by CVE-2018-8930?
CVE-2018-8930 affects the AMD EPYC Server, Ryzen, Ryzen Pro, and Ryzen Mobile processor chips.
4
What is the main issue described by CVE-2018-8930?
The main issue of CVE-2018-8930 is the insufficient enforcement of Hardware Validated Boot in certain AMD processors.
5
Is CVE-2018-8930 exploitable remotely?
CVE-2018-8930 is not considered remotely exploitable, but it poses serious risks if an attacker has local access.