7.8

CVE-2021-26353

Failure to validate inputs in SMM may allow an attacker to create a mishandled error leaving the DRTM UApp in a partially initialized state potentially resulting in loss of memory integrity.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Amd ≫ Epyc 7763 Firmware Version < milanpi-sp3_1.0.0.4
   Amd ≫ Epyc 7763 Version -
Amd ≫ Epyc 7713p Firmware Version < milanpi-sp3_1.0.0.4
   Amd ≫ Epyc 7713p Version -
Amd ≫ Epyc 7713 Firmware Version < milanpi-sp3_1.0.0.4
   Amd ≫ Epyc 7713 Version -
Amd ≫ Epyc 7663 Firmware Version < milanpi-sp3_1.0.0.4
   Amd ≫ Epyc 7663 Version -
Amd ≫ Epyc 7643 Firmware Version < milanpi-sp3_1.0.0.4
   Amd ≫ Epyc 7643 Version -
Amd ≫ Epyc 75f3 Firmware Version < milanpi-sp3_1.0.0.4
   Amd ≫ Epyc 75f3 Version -
Amd ≫ Epyc 7543p Firmware Version < milanpi-sp3_1.0.0.4
   Amd ≫ Epyc 7543p Version -
Amd ≫ Epyc 7543 Firmware Version < milanpi-sp3_1.0.0.4
   Amd ≫ Epyc 7543 Version -
Amd ≫ Epyc 7513 Firmware Version < milanpi-sp3_1.0.0.4
   Amd ≫ Epyc 7513 Version -
Amd ≫ Epyc 7453 Firmware Version < milanpi-sp3_1.0.0.4
   Amd ≫ Epyc 7453 Version -
Amd ≫ Epyc 74f3 Firmware Version < milanpi-sp3_1.0.0.4
   Amd ≫ Epyc 74f3 Version -
Amd ≫ Epyc 7443p Firmware Version < milanpi-sp3_1.0.0.4
   Amd ≫ Epyc 7443p Version -
Amd ≫ Epyc 7443 Firmware Version < milanpi-sp3_1.0.0.4
   Amd ≫ Epyc 7443 Version -
Amd ≫ Epyc 7413 Firmware Version < milanpi-sp3_1.0.0.4
   Amd ≫ Epyc 7413 Version -
Amd ≫ Epyc 73f3 Firmware Version < milanpi-sp3_1.0.0.4
   Amd ≫ Epyc 73f3 Version -
Amd ≫ Epyc 7343 Firmware Version < milanpi-sp3_1.0.0.4
   Amd ≫ Epyc 7343 Version -
Amd ≫ Epyc 7313p Firmware Version < milanpi-sp3_1.0.0.4
   Amd ≫ Epyc 7313p Version -
Amd ≫ Epyc 7313 Firmware Version < milanpi-sp3_1.0.0.4
   Amd ≫ Epyc 7313 Version -
Amd ≫ Epyc 72f3 Firmware Version < milanpi-sp3_1.0.0.4
   Amd ≫ Epyc 72f3 Version -
Amd ≫ Epyc 7773x Firmware Version < milanpi-sp3_1.0.0.4
   Amd ≫ Epyc 7773x Version -
Amd ≫ Epyc 7473x Firmware Version < milanpi-sp3_1.0.0.4
   Amd ≫ Epyc 7473x Version -
Amd ≫ Epyc 7573x Firmware Version < milanpi-sp3_1.0.0.4
   Amd ≫ Epyc 7573x Version -
Amd ≫ Epyc 7373x Firmware Version < milanpi-sp3_1.0.0.4
   Amd ≫ Epyc 7373x Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.26% 0.169
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NIST 7.2 3.9 10
AV:L/AC:L/Au:N/C:C/I:C/A:C
CWE-665 Improper Initialization

The product does not initialize or incorrectly initializes a resource, which might leave the resource in an unexpected state when it is accessed or used.

https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032