HPE ProLiant und AMD EPYC Prozessoren: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 2

• Medium 6.0
  CVE-2025-0033

  Improper access control within AMD SEV-SNP could allow an admin privileged attacker to write to the RMP during SNP init…

  AMD AMD EPYC™ 9005 Series Processors (formerly codenamed "Turin") AMD EPYC™ 7003 Series Processors (formerly codenamed "Milan") amd64-microcode Debian Ubuntu
  Oct 14, 2025
• Medium 6.0
  CVE-2025-37149

  A potential out-of-bound reads vulnerability in HPE ProLiant RL300 Gen11 Server's UEFI firmware.

  Hewlett Packard Enterprise (HPE) ProLiant RL300 Gen11 Server
  Oct 14, 2025

Revision history

1. 2025-10-15 #2

   Neue Updates von Dell aufgenommen

2. 2025-10-14 #1

   Initiale Fassung

References

• HPE Security Bulletin HPESBHF04952 rev.1 vom 2025-10-14
  https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbhf04952en_us&docLocale=en_US
• HPE Security Bulletin HPESBHF04956 rev.1 vom 2025-10-14
  https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbhf04956en_us&docLocale=en_US
• AMD Security Bulletin AMD-SB-3020 vom 2025-10-14
  https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-3020.html
• Dell Security Advisory DSA-2025-352 vom 2025-10-16
  https://www.dell.com/support/kbdoc/000379661