{"id":"CVE-2025-54504","kind":"vulnerability","aliases":["CVE-2025-54504"],"related":[],"title":"AMD SEV firmware: admin can write to a trusted memory region","description":"Insufficient Granularity of Access Control in AMD Secure Encrypted Virtualization (SEV) firmware could allow an attacker with administrative privileges attacker to write to a trusted region used by AMD Secure Encrypted Virtualization-Encrypted State (SEV-ES), potentially resulting in loss of integrity.","summary":"AMD SEV firmware has an access control gap that lets an attacker with administrative privileges write to a trusted region used by SEV-ES. The result is loss of integrity for protected virtual machine state.","severity":"medium","cvss":5.9,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["amd","confidential-computing","hypervisor","infrastructure","sev","sev-es"],"not_affected_if":["no-sev-enabled","non-amd-hardware"],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T22:17:46+00:00","first_seen_at":"2026-11-10T22:27:22+00:00","triaged_at":"2026-11-10T22:30:36+00:00","updated_at":"2026-11-10T22:30:36+00:00","category":"infrastructure","confidence":0.6,"triage":{"at":"2026-11-10T22:30:36Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"AMD SEV firmware: admin can write to a trusted memory region","impact":"medium","summary":"AMD SEV firmware has an access control gap that lets an attacker with administrative privileges write to a trusted region used by SEV-ES. The result is loss of integrity for protected virtual machine state.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["amd","sev","sev-es","confidential-computing","hypervisor"],"confidence":0.6,"fix_status":"unknown","needs_auth":"yes","worst_case":"Protected VM encryption state integrity is lost via firmware write","analyst_note":"Find AMD's security bulletin for CVE-2025-54504 to list affected processors, firmware versions and fixed versions.","how_to_check":"- unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["no-sev-enabled","non-amd-hardware"],"who_is_affected":"Affects hosts running AMD EPYC processors with SEV or SEV-ES enabled for virtual machines, where the attacker already has administrative control of the host. Teams that do not run confidential VMs on AMD hardware can likely skip it. The sources do not list affected firmware versions.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"yes","severity_if_unknown":"medium"},"cost_usd":0.000695,"input_tokens":4571,"output_tokens":475,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-2025':13A,16A '-54504':14A,17A 'access':33B,67C 'admin':4A 'administr':41B,81C 'allow':77C 'amd':1A,18B,28B,70C,92C 'attack':39B,79C,83C 'comput':21B 'confidenti':20B 'confidential-comput':19B 'control':34B,68C 'could':76C 'cve':12A,15A 'encrypt':72C,94C,97C 'es':27B,52B,101C 'firmwar':3A,30B,75C 'gap':35B 'granular':65C 'hypervisor':22B 'infrastructur':23B 'insuffici':64C 'integr':58B,107C 'let':37B 'loss':56B,105C 'machin':62B 'memori':10A 'potenti':102C 'privileg':42B,82C 'protect':60B 'region':11A,47B,89C 'result':54B,103C 'secur':71C,93C 'sev':2A,24B,26B,29B,51B,74C,100C 'sev-':25B,50B,99C 'state':63B,98C 'trust':9A,46B,88C 'use':48B,90C 'virtual':61B,73C,96C 'virtualization-encrypt':95C 'write':6A,43B,85C","nicknames":[],"mitigations":[],"who_affected":"Affects hosts running AMD EPYC processors with SEV or SEV-ES enabled for virtual machines, where the attacker already has administrative control of the host. Teams that do not run confidential VMs on AMD hardware can likely skip it. The sources do not list affected firmware versions.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["amd","confidentialcomputing","hypervisor","infrastructure","medium","sev","seves"],"campaign_type":null,"search_a":"'-2025':13A,16A '-54504':14A,17A 'admin':4A 'amd':1A 'cve':12A,15A 'firmwar':3A 'memori':10A 'region':11A 'sev':2A 'trust':9A 'write':6A","search_b":"'access':33B 'administr':41B 'amd':18B,28B 'attack':39B 'comput':21B 'confidenti':20B 'confidential-comput':19B 'control':34B 'es':27B,52B 'firmwar':30B 'gap':35B 'hypervisor':22B 'infrastructur':23B 'integr':58B 'let':37B 'loss':56B 'machin':62B 'privileg':42B 'protect':60B 'region':47B 'result':54B 'sev':24B,26B,29B,51B 'sev-':25B,50B 'state':63B 'trust':46B 'use':48B 'virtual':61B 'write':43B","search_c":"'access':67C 'administr':81C 'allow':77C 'amd':70C,92C 'attack':79C,83C 'control':68C 'could':76C 'encrypt':72C,94C,97C 'es':101C 'firmwar':75C 'granular':65C 'insuffici':64C 'integr':107C 'loss':105C 'potenti':102C 'privileg':82C 'region':89C 'result':103C 'secur':71C,93C 'sev':74C,100C 'sev-':99C 'state':98C 'trust':88C 'use':90C 'virtual':73C,96C 'virtualization-encrypt':95C 'write':85C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T22:17:46+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:N/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"psirt@amd.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2025-54504","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-54504","severity":null,"published_at":"2026-11-10T22:17:46+00:00","modified_at":"2026-11-10T22:17:46+00:00","first_seen_at":"2026-11-10T22:27:22+00:00","fetched_at":"2026-11-10T22:27:22+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}