目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1336 元

100%
请我们喝杯咖啡

CVE-2025-54502— AMD EPYC Processor 安全漏洞

AI 预测 7.8 利用难度: 困难 EPSS 0.14% · P4

影响版本矩阵 67

厂商产品版本范围状态
AMDAMD Athlon™ 3000 Series Mobile Processors with Radeon™ GraphicsPicassoPI-FP5_1.0.1.2eunaffected
AMDAMD EPYC™ 4004 Series ProcessorsComboAM5PI 1.0.0.dunaffected
AMDAMD EPYC™ 7002 Series ProcessorsRome-1.0.0.Punaffected
AMDAMD EPYC™ 7003 Series ProcessorsMilanPI-SP3_1.0.0.Junaffected
AMDAMD EPYC™ 8004 Series ProcessorsGenoaPI_1.0.0.Hunaffected
AMDAMD EPYC™ 9004 Series ProcessorsGenoaPI_1.0.0.Hunaffected
AMDAMD EPYC™ 9005 Series ProcessorsTurinPI-SP5_1.0.0.9unaffected
AMDAMD EPYC™ 9V64H ProcessorMI300C 1.0.0.3unaffected
AMDAMD EPYC™ Embedded 7002 Series ProcessorsEmbRomePI-SP3 1.0.0.Funaffected
AMDAMD EPYC™ Embedded 7003 Series ProcessorsEmbMilanPI-SP3 1.0.0.Dunaffected
AMDAMD EPYC™ Embedded 8004 Series ProcessorsEmbGenoaPI-SP5 1.0.0.Dunaffected
AMDAMD EPYC™ Embedded 9004 Series Processors (formerly codenamed "Bergamo")EmbGenoaPI-SP5 1.0.0.Dunaffected
AMDAMD EPYC™ Embedded 9004 Series Processors (formerly codenamed "Genoa")EmbGenoaPI-SP5 1.0.0.Dunaffected
AMDAMD EPYC™ Embedded 9005 Series ProcessorsEmbeddedTurinPI_SP5_1004unaffected
AMDAMD Instinct™ MI300A Series ProcessorsMI300A 1.0.0.Cunaffected
AMDAMD Ryzen™ 3000 Series Desktop ProcessorsComboAM4v2PI 1.2.0.10unaffected
ComboAM4PI 1.0.0.10unaffected
AMDAMD Ryzen™ 3000 Series Mobile Processors with Radeon™ GraphicsPicassoPI-FP5_1.0.1.2eunaffected
AMDAMD Ryzen™ 4000 Series Desktop ProcessorsComboAM4v2PI 1.2.0.10unaffected
AMDAMD Ryzen™ 4000 Series Mobile Processors with Radeon™ GraphicsRenoirPI-FP6 1.0.0.Edunaffected
AMDAMD Ryzen™ 5000 Series Desktop ProcessorsComboAM4v2PI 1.2.0.10unaffected
AMDAMD Ryzen™ 5000 Series Desktop Processors with Radeon™ GraphicsComboAM4v2PI 1.2.0.10unaffected
AMDAMD Ryzen™ 5000 Series Mobile Processors with Radeon™ GraphicsCezannePI-FP6_1.0.1.1dunaffected
CezannePI-FP6_1.0.1.1dunaffected
AMDAMD Ryzen™ 6000 Series Processors with Radeon™ GraphicsRembrandtPI-FP7_1.0.0.Bgunaffected
AMDAMD Ryzen™ 7000 Series Desktop ProcessorsComboAM5PI 1.0.0.dunaffected
ComboAM5PI 1.1.0.3funaffected
ComboAM5PI 1.2.0.3hunaffected
AMDAMD Ryzen™ 7000 Series Desktop Processors (formerly codenamed "Raphael")ComboAM5PI 1.2.8.0unaffected
AMDAMD Ryzen™ 7020 Series Processors with Radeon™ GraphicsMendocinoPI-FT6_1.0.0.7gunaffected
AMDAMD Ryzen™ 7030 Series Mobile Processors with Radeon™ GraphicsCezannePI-FP6_1.0.1.1dunaffected
AMDAMD Ryzen™ 7035 Series Processors with Radeon™ GraphicsRembrandtPI-FP7_1.0.0.Bgunaffected
AMDAMD Ryzen™ 7040 Series Mobile Processors with Radeon™ GraphicsPhoenixPI-FP8-FP7_1.2.0.0funaffected
AMDAMD Ryzen™ 7045 Series Mobile Processors with Radeon™ GraphicsDragonRangeFL1PI 1.0.0.3kunaffected
AMDAMD Ryzen™ 8000 Series Desktop ProcessorsComboAM5PI 1.1.0.3funaffected
ComboAM5PI 1.2.0.3hunaffected
AMDAMD Ryzen™ 8000 Series Desktop Processors (formerly codenamed "Phoenix")ComboAM5PI 1.2.8.0unaffected
AMDAMD Ryzen™ 8040 Series Mobile Processors with Radeon™ GraphicsPhoenixPI-FP8-FP7_1.2.0.0funaffected
AMDAMD Ryzen™ 9000 Series Desktop ProcessorsComboAM5PI 1.2.0.3hunaffected
AMDAMD Ryzen™ 9000 Series Desktop Processors (formerly codenamed "Granite Ridge")ComboAM5PI 1.2.8.0unaffected
AMDAMD Ryzen™ 9000HX Series ProcessorsFireRangeFL1PI 1.0.0.0dunaffected
AMDAMD Ryzen™ AI 300 Series ProcessorsStrixKrackanPI-FP8_1.1.0.0eunaffected
StrixKrackanPI-FP8_1.1.0.2dunaffected
AMDAMD Ryzen™ AI Max 300 Series ProcessorsStrixHaloPI-FP11_1.0.0.2aunaffected
AMDAMD Ryzen™ Embedded 5000 Series ProcessorsEmbAM4PI 1.0.0.9unaffected
AMDAMD Ryzen™ Embedded 7000 Series ProcessorsEmbeddedAM5PI 1.0.0.7unaffected
AMDAMD Ryzen™ Embedded 8000 Series ProcessorsEmbeddedPhoenixPI-FP7r2_1.0.0.4unaffected
AMDAMD Ryzen™ Embedded 9000 Series ProcessorsEmbeddedAM5PI 1.0.0.5unaffected
AMDAMD Ryzen™ Embedded R1000 Series ProcessorsEmbeddedPI-FP5 1213unaffected
AMDAMD Ryzen™ Embedded R2000 Series ProcessorsEmbeddedR2KPI-FP5 1008unaffected
AMDAMD Ryzen™ Embedded V1000 Series Processors (formerly codenamed "Raven Ridge")EmbeddedPI-FP5 1213unaffected
AMDAMD Ryzen™ Embedded V2000 Series ProcessorsEmbeddedPI-FP6_1.0.0.Dunaffected
AMDAMD Ryzen™ Embedded V3000 Series ProcessorsEmbedded-PI_FP7r2 1012unaffected
AMDAMD Ryzen™ Threadripper™ 7000 ProcessorsShimadaPeakPI-SP6 1.0.0.1cunaffected
AMDAMD Ryzen™ Threadripper™ 9000 ProcessorsShimadaPeakPI-SP6 1.0.0.1cunaffected
AMDAMD Ryzen™ Threadripper™ PRO 3000 WX-Series ProcessorsChagallWSPI-sWRX8 1.0.0.Dunaffected
CastlePeakWSPI-sWRX8 1.0.0.Iunaffected
AMDAMD Ryzen™ Threadripper™ PRO 5000 WX-Series ProcessorsChagallWSPI-sWRX8 1.0.0.Dunaffected
AMDAMD Ryzen™ Threadripper™ PRO 7000 WX-Series ProcessorsStormPeakPI-SP6 1.0.0.1munaffected
StormPeakPI-SP6_1.1.0.0kunaffected
ShimadaPeakPI-SP6 1.0.0.1cunaffected
AMDAMD Ryzen™ Threadripper™ PRO 9000 WX-Series ProcessorsShimadaPeakPI-SP6 1.0.0.1cunaffected
AMDAMD Ryzen™ Z1 Series ProcessorsStrixKrackanPI-FP8_1.1.0.0eunaffected
PhoenixPI-FP8-FP7_1.2.0.0funaffected
AMDAMD Ryzen™ Z2 Series ProcessorsPhoenixPI-FP8-FP7_1.2.0.0funaffected
AMDAMD Ryzen™ Z2 Series Processors ExtremeStrixKrackanPI-FP8_1.1.0.0eunaffected
AMDAMD Ryzen™ Z2 Series Processors GoRembrandtPI-FP7_1.0.0.Bgunaffected
获取后续新漏洞提醒登录后订阅

一、 漏洞 CVE-2025-54502 基础信息

漏洞信息
对漏洞内容有疑问？看看神龙的深度分析是否有帮助！
查看神龙十问 ↗

尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。

Vulnerability Title
N/A
来源: CVE Program / CVE List V5
Vulnerability Description
Incorrect use of boot service in the AMD Platform Configuration Blob (APCB) SMM driver could allow a privileged attacker with local access (Ring 0) to achieve privilege escalation potentially resulting in arbitrary code execution.
来源: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
来源: CVE Program / CVE List V5
Vulnerability Type
将资源暴露给错误范围
来源: CVE Program / CVE List V5
Vulnerability Title
AMD EPYC Processor 安全漏洞
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Description
AMD EPYC Processor是美国超威半导体（AMD）公司的一系列多核处理器。 AMD EPYC Processor存在安全漏洞，该漏洞源于引导服务使用不当，可能导致权限提升和任意代码执行。
来源: 中国国家信息安全漏洞库 CNNVD
CVSS Information
N/A
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Type
N/A
来源: 中国国家信息安全漏洞库 CNNVD

受影响产品

厂商产品影响版本CPE订阅
AMDAMD EPYC™ 9004 Series Processors GenoaPI_1.0.0.H -
AMDAMD EPYC™ 7003 Series Processors MilanPI-SP3_1.0.0.J -
AMDAMD EPYC™ 7002 Series Processors Rome-1.0.0.P -
AMDAMD EPYC™ 4004 Series Processors ComboAM5PI 1.0.0.d -
AMDAMD EPYC™ 9005 Series Processors TurinPI-SP5_1.0.0.9 -
AMDAMD Instinct™ MI300A Series Processors MI300A 1.0.0.C -
AMDAMD EPYC™ 9V64H Processor MI300C 1.0.0.3 -
AMDAMD EPYC™ 8004 Series Processors GenoaPI_1.0.0.H -
AMDAMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics RenoirPI-FP6 1.0.0.Ed -
AMDAMD Ryzen™ 7035 Series Processors with Radeon™ Graphics RembrandtPI-FP7_1.0.0.Bg -
AMDAMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics PicassoPI-FP5_1.0.1.2e -
AMDAMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics PhoenixPI-FP8-FP7_1.2.0.0f -
AMDAMD Ryzen™ 7020 Series Processors with Radeon™ Graphics MendocinoPI-FT6_1.0.0.7g -
AMDAMD Ryzen™ 7045 Series Mobile Processors with Radeon™ Graphics DragonRangeFL1PI 1.0.0.3k -
AMDAMD Ryzen™ 7000 Series Desktop Processors ComboAM5PI 1.0.0.d -
AMDAMD Ryzen™ 3000 Series Desktop Processors ComboAM4v2PI 1.2.0.10 -
AMDAMD Ryzen™ Threadripper™ PRO 3000 WX-Series Processors ChagallWSPI-sWRX8 1.0.0.D -
AMDAMD Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphics CezannePI-FP6_1.0.1.1d -
AMDAMD Ryzen™ Threadripper™ PRO 3000 WX-Series Processors CastlePeakWSPI-sWRX8 1.0.0.I -
AMDAMD Ryzen™ 9000HX Series Processors FireRangeFL1PI 1.0.0.0d -
AMDAMD Ryzen™ AI 300 Series Processors StrixKrackanPI-FP8_1.1.0.0e -
AMDAMD Ryzen™ Threadripper™ PRO 5000 WX-Series Processors ChagallWSPI-sWRX8 1.0.0.D -
AMDAMD Ryzen™ Threadripper™ PRO 7000 WX-Series Processors StormPeakPI-SP6 1.0.0.1m -
AMDAMD Ryzen™ 7000 Series Desktop Processors ComboAM5PI 1.1.0.3f -
AMDAMD Ryzen™ 7000 Series Desktop Processors ComboAM5PI 1.2.0.3h -
AMDAMD Ryzen™ 8000 Series Desktop Processors ComboAM5PI 1.1.0.3f -
AMDAMD Ryzen™ 8000 Series Desktop Processors ComboAM5PI 1.2.0.3h -
AMDAMD Ryzen™ 9000 Series Desktop Processors ComboAM5PI 1.2.0.3h -
AMDAMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics CezannePI-FP6_1.0.1.1d -
AMDAMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics CezannePI-FP6_1.0.1.1d -
AMDAMD Ryzen™ 4000 Series Desktop Processors ComboAM4v2PI 1.2.0.10 -
AMDAMD Ryzen™ 5000 Series Desktop Processors ComboAM4v2PI 1.2.0.10 -
AMDAMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics ComboAM4v2PI 1.2.0.10 -
AMDAMD Ryzen™ 3000 Series Desktop Processors ComboAM4PI 1.0.0.10 -
AMDAMD Ryzen™ 8040 Series Mobile Processors with Radeon™ Graphics PhoenixPI-FP8-FP7_1.2.0.0f -
AMDAMD Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics PicassoPI-FP5_1.0.1.2e -
AMDAMD Ryzen™ 6000 Series Processors with Radeon™ Graphics RembrandtPI-FP7_1.0.0.Bg -
AMDAMD Ryzen™ AI Max 300 Series Processors StrixHaloPI-FP11_1.0.0.2a -
AMDAMD Ryzen™ Z1 Series Processors StrixKrackanPI-FP8_1.1.0.0e -
AMDAMD Ryzen™ Z2 Series Processors Extreme StrixKrackanPI-FP8_1.1.0.0e -
AMDAMD Ryzen™ Z2 Series Processors PhoenixPI-FP8-FP7_1.2.0.0f -
AMDAMD Ryzen™ Z2 Series Processors Go RembrandtPI-FP7_1.0.0.Bg -
AMDAMD Ryzen™ Threadripper™ PRO 7000 WX-Series Processors ShimadaPeakPI-SP6 1.0.0.1c -
AMDAMD Ryzen™ Threadripper™ 7000 Processors ShimadaPeakPI-SP6 1.0.0.1c -
AMDAMD Ryzen™ Threadripper™ 9000 Processors ShimadaPeakPI-SP6 1.0.0.1c -
AMDAMD Ryzen™ Threadripper™ PRO 9000 WX-Series Processors ShimadaPeakPI-SP6 1.0.0.1c -
AMDAMD Ryzen™ AI 300 Series Processors StrixKrackanPI-FP8_1.1.0.2d -
AMDAMD Ryzen™ 7000 Series Desktop Processors (formerly codenamed "Raphael") ComboAM5PI 1.2.8.0 -
AMDAMD Ryzen™ 8000 Series Desktop Processors (formerly codenamed "Phoenix") ComboAM5PI 1.2.8.0 -
AMDAMD Ryzen™ 9000 Series Desktop Processors (formerly codenamed "Granite Ridge") ComboAM5PI 1.2.8.0 -
AMDAMD EPYC™ Embedded 7003 Series Processors EmbMilanPI-SP3 1.0.0.D -
AMDAMD EPYC™ Embedded 9004 Series Processors (formerly codenamed "Genoa") EmbGenoaPI-SP5 1.0.0.D -
AMDAMD EPYC™ Embedded 7002 Series Processors EmbRomePI-SP3 1.0.0.F -
AMDAMD Ryzen™ Embedded R1000 Series Processors EmbeddedPI-FP5 1213 -
AMDAMD Ryzen™ Embedded R2000 Series Processors EmbeddedR2KPI-FP5 1008 -
AMDAMD Ryzen™ Embedded V1000 Series Processors (formerly codenamed "Raven Ridge") EmbeddedPI-FP5 1213 -
AMDAMD Ryzen™ Embedded 5000 Series Processors EmbAM4PI 1.0.0.9 -
AMDAMD Ryzen™ Embedded V2000 Series Processors EmbeddedPI-FP6_1.0.0.D -
AMDAMD Ryzen™ Embedded V3000 Series Processors Embedded-PI_FP7r2 1012 -
AMDAMD EPYC™ Embedded 9004 Series Processors (formerly codenamed "Bergamo") EmbGenoaPI-SP5 1.0.0.D -
AMDAMD EPYC™ Embedded 8004 Series Processors EmbGenoaPI-SP5 1.0.0.D -
AMDAMD Ryzen™ Embedded 9000 Series Processors EmbeddedAM5PI 1.0.0.5 -
AMDAMD Ryzen™ Embedded 8000 Series Processors EmbeddedPhoenixPI-FP7r2_1.0.0.4 -
AMDAMD Ryzen™ Embedded 7000 Series Processors EmbeddedAM5PI 1.0.0.7 -
AMDAMD EPYC™ Embedded 9005 Series Processors EmbeddedTurinPI_SP5_1004 -

二、漏洞 CVE-2025-54502 的公开POC

#POC 描述源链接神龙链接
AI 生成 POC高级

未找到公开 POC。

登录以生成 AI POC

三、漏洞 CVE-2025-54502 的情报信息

请登录查看更多情报信息。

CVE-2025-54502 其他参考 (1)

同批安全公告 · AMD · 2026-04-16 · 共 3 条

CVE-2025-54510AMD EPYC 安全漏洞
CVE-2023-20585Microsoft Input-Output Memory Management Unit 安全漏洞

IV. Related Vulnerabilities

Same product: AMD EPYC™ 9004 Series Processors
Same vendor: AMD
Same weakness: CWE-668

V. Comments for CVE-2025-54502

暂无评论

发表评论