Description
Improper register access control in ASP may allow a privileged attacker to perform unauthorized access to ASP’s Crypto Co-Processor (CCP) registers from x86 resulting in potential loss of control of cryptographic key pointer/index leading to loss of integrity or confidentiality.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| AMD | AMD EPYC™ 7002 Series Processors | — | RomePI 100H SEV 0.24.19 [hex 00.18.13] |
| AMD | AMD Ryzen™ Threadripper™ 3000 Processors | — | CastlePeakPI-SP3r3_1.0.0.F |
| AMD | AMD Ryzen™ Threadripper™ PRO 3000 WX Processors | — | ChagallWSPI-sWRX8 1.0.0.C |
| AMD | AMD Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics | — | PicassoPI-FP5_1.0.1.2c |
| AMD | AMD EPYC™ Embedded 7002 Series Processors | — | EmbRomePI-SP3 1.0.0.B |
| AMD | AMD EPYC™ Embedded 7003 Series Processors | — | EmbMilanPI-SP3 1.0.0.8 |
| AMD | AMD Ryzen™ Embedded R1000 Series Processors | — | EmbeddedPI-FP5 1211 |
| AMD | AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics | — | EmbeddedPI-FP5 1211 |
| AMD | AMD Ryzen™ Embedded R2000 Series Processors | — | EmbeddedR2KPI-FP5 1006 |
| AMD | AMD Ryzen™ Embedded V1000 Series Processors | — | EmbeddedPI-FP5 1211 RC1 |
Advisories 1
- WID-SEC-2025-1298 AMD Prozessoren: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen BSI CERT-Bund (WID) · Oct 14, 2025