CVE-2025-54502
HIGHAmd Epyc™ 9004 Series Processors - Privilege Escalation
Title source: ruleDescription
Incorrect use of boot service in the AMD Platform Configuration Blob (APCB) SMM driver could allow a privileged attacker with local access (Ring 0) to achieve privilege escalation potentially resulting in arbitrary code execution.
Scores
CVSS v4
7.1
EPSS
0.0002
EPSS Percentile
5.5%
CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
total
Details
CWE
CWE-668
Status
published
Products (50)
AMD/AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics
PicassoPI-FP5_1.0.1.2e
AMD/AMD EPYC™ 4004 Series Processors
ComboAM5PI 1.0.0.d
AMD/AMD EPYC™ 7002 Series Processors
Rome-1.0.0.P
AMD/AMD EPYC™ 7003 Series Processors
MilanPI-SP3_1.0.0.J
AMD/AMD EPYC™ 8004 Series Processors
GenoaPI_1.0.0.H
AMD/AMD EPYC™ 9004 Series Processors
GenoaPI_1.0.0.H
AMD/AMD EPYC™ 9005 Series Processors
TurinPI-SP5_1.0.0.9
AMD/AMD EPYC™ 9V64H Processor
MI300C 1.0.0.3
AMD/AMD EPYC™ Embedded 7002 Series Processors
EmbRomePI-SP3 1.0.0.F
AMD/AMD EPYC™ Embedded 7003 Series Processors
EmbMilanPI-SP3 1.0.0.D
... and 40 more
Published
Apr 16, 2026
Tracked Since
Apr 17, 2026