{"id":"CVE-2025-0008","kind":"vulnerability","aliases":["CVE-2025-0008"],"related":[],"title":"AMD EPYC Secure Debug Unlock bypass lets a privileged local attacker gain debug access","description":"Insufficient verification of data authenticity may allow a local attacker to bypass Secure Debug Unlock (SDU), potentially resulting in unauthorized debug access.","summary":"AMD-SB-3049: the SDU authorization key provisioned in the BIOS is insufficiently validated and may be modified. An attacker with Ring 0 privileges can bypass debug access protections. CVSS 4.0 8.4. AMD lists EPYC 7001/7002/7003 and EPYC Embedded 3000/7002/7003. No exploitation or PoC is mentioned; AMD says it found this internally.","severity":"high","cvss":8.4,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"AMD EPYC 7001","fixed":["NaplesPI-SP3_1.0.0.T"],"affected":"before NaplesPI-SP3_1.0.0.T","ecosystem":"vendor"},{"name":"AMD EPYC 7002","fixed":["RomePI-SP3_1.0.0.Q"],"affected":"before RomePI-SP3_1.0.0.Q","ecosystem":"vendor"},{"name":"AMD EPYC 7003","fixed":["MilanPI 1.0.0.G"],"affected":"before MilanPI 1.0.0.G","ecosystem":"vendor"},{"name":"AMD EPYC Embedded 3000","fixed":["SnowyOwl_SP4_SP4r2.1.1.0.I"],"affected":"before SnowyOwl_SP4_SP4r2.1.1.0.I","ecosystem":"vendor"},{"name":"AMD EPYC Embedded 7002","fixed":["EmbeddedRomePI-SP3 1.0.0.G"],"affected":"before EmbeddedRomePI-SP3 1.0.0.G","ecosystem":"vendor"},{"name":"AMD EPYC Embedded 7003","fixed":["EmbMilanPI-SP3 1.0.0.B"],"affected":"before EmbMilanPI-SP3 1.0.0.B","ecosystem":"vendor"}],"ecosystems":[],"tags":["amd","bios","epyc","firmware","hardware","infrastructure","secure-debug"],"not_affected_if":["managed-hosting"],"how_to_check":"Check whether your servers use AMD EPYC 7001/7002/7003 or EPYC Embedded 3000/7002/7003 processors. Then compare the BIOS PI version (from the server vendor's BIOS release notes, or dmidecode -t bios) with the mitigated PI versions in AMD-SB-3049.","fix":"Install a BIOS from your server/board vendor that includes AMD's mitigated PI: EPYC 7001 NaplesPI-SP3_1.0.0.T; 7002 RomePI-SP3_1.0.0.Q; 7003 MilanPI 1.0.0.G; Embedded 3000 SnowyOwl_SP4_SP4r2.1.1.0.I; Embedded 7002 EmbeddedRomePI-SP3 1.0.0.G; Embedded 7003 EmbMilanPI-SP3 1.0.0.B.","status":"open","published_at":"2026-11-10T23:17:18+00:00","first_seen_at":"2026-11-10T23:27:34+00:00","triaged_at":"2026-11-10T23:28:45+00:00","updated_at":"2026-11-10T23:31:05+00:00","category":"infrastructure","confidence":0.85,"triage":{"at":"2026-11-10T23:28:45Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Secure Debug Unlock bypass lets a local attacker gain unauthorized debug access","impact":"medium","summary":"Insufficient verification of data authenticity lets a local attacker bypass Secure Debug Unlock (SDU) on affected hardware. The result is unauthorized debug access to the device.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["hardware","secure-debug"],"confidence":0.5,"fix_status":"unknown","needs_auth":"unknown","worst_case":"Attacker gains unauthorized debug access to the device","analyst_note":"Identify the affected hardware or firmware products and vendor advisory for CVE-2025-0008; check NVD link for affected platforms and fixed versions.","how_to_check":"unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":[],"who_is_affected":"unknown","user_interaction":"unknown","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000635,"input_tokens":4512,"output_tokens":367,"severity_before":"high"},"analyst_status":"done","analyst_note":"Identify the affected hardware or firmware products and vendor advisory for CVE-2025-0008; check NVD link for affected platforms and fixed versions.","search":"'-0008':17A,20A '-2025':16A,19A '0':74B '3000':33A '3000/7002/7003':91B '3049':54B '4.0':82B '7001':23A '7001/7002/7003':87B '7002':26A,37A '7003':29A,41A '8.4':83B 'access':14A,79B,125C 'allow':110C 'amd':1A,21A,24A,27A,30A,34A,38A,42B,52B,84B,98B 'amd-sb':51B 'attack':11A,71B,113C 'authent':108C 'author':57B 'bio':43B,62B 'bypass':6A,77B,115C 'cve':15A,18A 'cvss':81B 'data':107C 'debug':4A,13A,50B,78B,117C,124C 'embed':90B 'embedded':32A,36A,40A 'epyc':2A,22A,25A,28A,31A,35A,39A,44B,86B,89B 'exploit':93B 'firmwar':45B 'found':101B 'gain':12A 'hardwar':46B 'infrastructur':47B 'insuffici':64B,104C 'intern':103B 'key':58B 'let':7A 'list':85B 'local':10A,112C 'may':67B,109C 'mention':97B 'modifi':69B 'poc':95B 'potenti':120C 'privileg':9A,75B 'protect':80B 'provis':59B 'result':121C 'ring':73B 'say':99B 'sb':53B 'sdu':56B,119C 'secur':3A,49B,116C 'secure-debug':48B 'unauthor':123C 'unlock':5A,118C 'valid':65B 'verif':105C","nicknames":[],"mitigations":[],"who_affected":"Servers and embedded systems on the AMD EPYC 7001, 7002, 7003 and EPYC Embedded 3000, 7002, 7003 series are listed by AMD. The attacker needs Ring 0 (kernel-level) privileges on the machine, so the risk is mainly to bare-metal hosts where an attacker has already gained root. Cloud customers on managed VMs can leave it to the provider.","tier":"B","verified":{"fix":{"at":"2026-11-10T23:31:05Z","by":"analyst","doc":"https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3049.html","run_id":3177},"products":{"at":"2026-11-10T23:31:05Z","by":"analyst","doc":"https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3049.html","run_id":3177},"who_affected":{"at":"2026-11-10T23:31:05Z","by":"analyst","doc":"https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3049.html","run_id":3177}},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"pkeys":["amdepyc7001","amdepyc7002","amdepyc7003","amdepycembedded3000","amdepycembedded7002","amdepycembedded7003","epyc7001","epyc7002","epyc7003","epycembedded3000","epycembedded7002","epycembedded7003"],"ptokens":["3000","7001","7002","7003","amd","embedded","epyc"],"labels":["amd","bios","epyc","firmware","hardware","high","infrastructure","securedebug"],"campaign_type":null,"search_a":"'-0008':17A,20A '-2025':16A,19A '3000':33A '7001':23A '7002':26A,37A '7003':29A,41A 'access':14A 'amd':1A,21A,24A,27A,30A,34A,38A 'attack':11A 'bypass':6A 'cve':15A,18A 'debug':4A,13A 'embedded':32A,36A,40A 'epyc':2A,22A,25A,28A,31A,35A,39A 'gain':12A 'let':7A 'local':10A 'privileg':9A 'secur':3A 'unlock':5A","search_b":"'0':74B '3000/7002/7003':91B '3049':54B '4.0':82B '7001/7002/7003':87B '8.4':83B 'access':79B 'amd':42B,52B,84B,98B 'amd-sb':51B 'attack':71B 'author':57B 'bio':43B,62B 'bypass':77B 'cvss':81B 'debug':50B,78B 'embed':90B 'epyc':44B,86B,89B 'exploit':93B 'firmwar':45B 'found':101B 'hardwar':46B 'infrastructur':47B 'insuffici':64B 'intern':103B 'key':58B 'list':85B 'may':67B 'mention':97B 'modifi':69B 'poc':95B 'privileg':75B 'protect':80B 'provis':59B 'ring':73B 'say':99B 'sb':53B 'sdu':56B 'secur':49B 'secure-debug':48B 'valid':65B","search_c":"'access':125C 'allow':110C 'attack':113C 'authent':108C 'bypass':115C 'data':107C 'debug':117C,124C 'insuffici':104C 'local':112C 'may':109C 'potenti':120C 'result':121C 'sdu':119C 'secur':116C 'unauthor':123C 'unlock':118C 'verif':105C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T23:17:18+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"psirt@amd.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2025-0008","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-0008","severity":null,"published_at":"2026-11-10T23:17:18+00:00","modified_at":"2026-11-10T23:17:18+00:00","first_seen_at":"2026-11-10T23:27:34+00:00","fetched_at":"2026-11-10T23:27:34+00:00","note":null},{"source":"analyst","external_id":"CVE-2025-0008:3177","url":"https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3049.html","severity":null,"published_at":"2026-11-10T23:31:05+00:00","modified_at":"2026-11-10T23:31:05+00:00","first_seen_at":"2026-11-10T23:31:05+00:00","fetched_at":"2026-11-10T23:31:05+00:00","note":"Read AMD-SB-3049 (primary). Affected list and PI fixes from it. A fankh.github.io page calls this CVE a PAN-OS overflow; it contradicts AMD and was ignored. No social search (low-profile firmware issue, no exploitation reported). how_to_check not marked verified (dmidecode hint is mine).","cites":["https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3049.html"]}],"documents":[{"id":120334,"url":"https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3049.html","title":"AMD-SB-3049 Secure Debug Unlock (SDU) Vulnerability","kind":"advisory","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"advisory","confidence":null,"note":null}],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}