7.8

CVE-2021-26353

Failure to validate inputs in SMM may allow an attacker to create a mishandled error leaving the DRTM UApp in a partially initialized state potentially resulting in loss of memory integrity.

Data is provided by the National Vulnerability Database (NVD)
Amd ≫ Epyc 7763 Firmware Version < milanpi-sp3_1.0.0.4
   Amd ≫ Epyc 7763 Version-
Amd ≫ Epyc 7713p Firmware Version < milanpi-sp3_1.0.0.4
   Amd ≫ Epyc 7713p Version-
Amd ≫ Epyc 7713 Firmware Version < milanpi-sp3_1.0.0.4
   Amd ≫ Epyc 7713 Version-
Amd ≫ Epyc 7663 Firmware Version < milanpi-sp3_1.0.0.4
   Amd ≫ Epyc 7663 Version-
Amd ≫ Epyc 7643 Firmware Version < milanpi-sp3_1.0.0.4
   Amd ≫ Epyc 7643 Version-
Amd ≫ Epyc 75f3 Firmware Version < milanpi-sp3_1.0.0.4
   Amd ≫ Epyc 75f3 Version-
Amd ≫ Epyc 7543p Firmware Version < milanpi-sp3_1.0.0.4
   Amd ≫ Epyc 7543p Version-
Amd ≫ Epyc 7543 Firmware Version < milanpi-sp3_1.0.0.4
   Amd ≫ Epyc 7543 Version-
Amd ≫ Epyc 7513 Firmware Version < milanpi-sp3_1.0.0.4
   Amd ≫ Epyc 7513 Version-
Amd ≫ Epyc 7453 Firmware Version < milanpi-sp3_1.0.0.4
   Amd ≫ Epyc 7453 Version-
Amd ≫ Epyc 74f3 Firmware Version < milanpi-sp3_1.0.0.4
   Amd ≫ Epyc 74f3 Version-
Amd ≫ Epyc 7443p Firmware Version < milanpi-sp3_1.0.0.4
   Amd ≫ Epyc 7443p Version-
Amd ≫ Epyc 7443 Firmware Version < milanpi-sp3_1.0.0.4
   Amd ≫ Epyc 7443 Version-
Amd ≫ Epyc 7413 Firmware Version < milanpi-sp3_1.0.0.4
   Amd ≫ Epyc 7413 Version-
Amd ≫ Epyc 73f3 Firmware Version < milanpi-sp3_1.0.0.4
   Amd ≫ Epyc 73f3 Version-
Amd ≫ Epyc 7343 Firmware Version < milanpi-sp3_1.0.0.4
   Amd ≫ Epyc 7343 Version-
Amd ≫ Epyc 7313p Firmware Version < milanpi-sp3_1.0.0.4
   Amd ≫ Epyc 7313p Version-
Amd ≫ Epyc 7313 Firmware Version < milanpi-sp3_1.0.0.4
   Amd ≫ Epyc 7313 Version-
Amd ≫ Epyc 72f3 Firmware Version < milanpi-sp3_1.0.0.4
   Amd ≫ Epyc 72f3 Version-
Amd ≫ Epyc 7773x Firmware Version < milanpi-sp3_1.0.0.4
   Amd ≫ Epyc 7773x Version-
Amd ≫ Epyc 7473x Firmware Version < milanpi-sp3_1.0.0.4
   Amd ≫ Epyc 7473x Version-
Amd ≫ Epyc 7573x Firmware Version < milanpi-sp3_1.0.0.4
   Amd ≫ Epyc 7573x Version-
Amd ≫ Epyc 7373x Firmware Version < milanpi-sp3_1.0.0.4
   Amd ≫ Epyc 7373x Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.13% 0.332
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 7.2 3.9 10
AV:L/AC:L/Au:N/C:C/I:C/A:C
CWE-665 Improper Initialization

The product does not initialize or incorrectly initializes a resource, which might leave the resource in an unexpected state when it is accessed or used.