Another AMD Zen 'Secure Encrypted Virtualization' Vulnerability Demonstrated by Researchers

Another AMD Zen ‘Secure Encrypted Virtualization’ Vulnerability Demonstrated by Researchers

Computer Component

A team of security researchers with Cornell University have demonstrated a proof of concept attack on AMD’s Secure Encrypted Virtualization (SEV) technology, leveraging the Zen-integrated AMD Secure Processor (AMD-SP) to achieve full system access.  The technique requires physical access to the AMD system and is based on a voltage glitching attack that allows a bad…

dHfSix2pruqsUtdTcoTrcC 1200 80

AMD Discloses Vulnerabilities in EPYC Processors’ Secure Encrypted Virtualization

Computer Component

AMD disclosed two exploits targeting the Secure Encrypted Virtualization (SEV) feature used by its first-, second-, and third-gen EPYC processors ahead of their presentation at the 15th IEEE Workshop on Offensive Technologies (WOOT’21). The first exploit, CVE-2020-12967, is set to be presented in a paper from researchers at Fraunhofer AISEC and the Technical University of…