AMD EPYC SEV firmware: Static key in ASP bootloader allows firmware downgrade
Summary
A per-part static key in the AMD Secure Processor (ASP) bootloader can allow an attacker to downgrade the Secure Encrypted Virtualization (SEV) firmware. A downgraded firmware could then be used to exploit known SEV flaws and decrypt guest memory, which affects confidentiality. The attacker needs local access and high privileges on the host or hypervisor, so the risk is mainly for hosts running SEV-protected virtual machines.
Affected
- EPYC 9004, 7003 and 8004 series, and EPYC Embedded 7003, 8004 and 9004 (Genoa, Bergamo) series, as listed in the CNA record
- Exact affected firmware versions: Unknown.
- The mirrored CNA data is contradictory for GenoaPI_1.0.0.J (listed as both unaffected and affected). Verify in AMD-SB-3038.
Fixed in
Unknown. Check AMD-SB-3038 and the BIOS releases of your server vendor for fixed firmware versions.
Workaround
Unknown. No workaround is documented in the sources reviewed. Mitigation is a firmware/BIOS update via the OEM or AMD guidance.
Exploitation
- Not recorded in the CISA KEV catalog.
- No public proof-of-concept found in the tracked sources.
- Published 2026-11-10; the situation may change.
Our recommendation
- Inventory EPYC hosts, including the 7003, 8004, 9004 and embedded models.
- Check the BIOS/firmware status with your server vendor once AMD-SB-3038 lists fixed versions, and apply updates in the next patch cycle.
- Restrict administrative and physical access to hypervisor hosts.
- Check whether any virtual machines rely on SEV.
Public exploits
PoC-in-GitHub, Metasploit and Exploit-DB list nothing for this CVE.
Research sources
- AMD Security Bulletin AMD-SB-3038 www.amd.com
- AMD Product Security www.amd.com
- Supermicro Security Center www.supermicro.com
- CVE-2026-0003 record summary (threatint mirror) cve.threatint.com
- OffSeq threat tracker entry radar.offseq.com
Researched and written up in English and German by an AI (Claude by Anthropic) based on NVD, CISA, EPSS and the sources listed. The vendor information is authoritative. Researched on 11 Nov 2026, 14:55.
Original description (NVD)
Use of a per-part static key in the ASP Bootloader could allow an attacker to downgrade the Secure Encrypted Virtualization (SEV) firmware and exploit known vulnerabilities to decrypt memory potentially resulting in loss of confidentiality.
Sources
The tracker combines official, freely usable data sources – updated continuously:
- NVD (NIST) – CVEs, rating (CVSS), affected products
- CISA KEV – vulnerabilities confirmed by CISA as actively exploited
- CISA Vulnrichment – CISA assessment (SSVC) in the official CVE record
- FIRST EPSS – probability of exploitation
- Microsoft MSRC – Patch Tuesday: vulnerabilities, severity, updates
- PoC-in-GitHub – public proof-of-concept repositories
- Metasploit (Rapid7) – modules of the Metasploit Framework
- Exploit-DB (OffSec) – archive of public exploits (links only)
- Patch days: official vendor pages (linked per vendor) (Vendor patch days)
This product uses data from the NVD API but is not endorsed or certified by the NVD. EPSS data © FIRST.org.
Affected? We can help.
We check whether your systems are affected, install updates and close the gap – continuously with the System Health Checker if you wish.