7.4

CVE-2021-26356

A TOCTOU in ASP bootloader may allow an attacker
to tamper with the SPI ROM following data read to memory potentially resulting
in S3 data corruption and information disclosure.








Daten sind bereitgestellt durch National Vulnerability Database (NVD)
AmdEpyc 7001 Firmware Version < naplespi_1.0.0.h
   AmdEpyc 7001 Version-
AmdEpyc 7251 Firmware Version < naplespi_1.0.0.h
   AmdEpyc 7251 Version-
AmdEpyc 7261 Firmware Version < naplespi_1.0.0.h
   AmdEpyc 7261 Version-
AmdEpyc 7281 Firmware Version < naplespi_1.0.0.h
   AmdEpyc 7281 Version-
AmdEpyc 7301 Firmware Version < naplespi_1.0.0.h
   AmdEpyc 7301 Version-
AmdEpyc 7351 Firmware Version < naplespi_1.0.0.h
   AmdEpyc 7351 Version-
AmdEpyc 7351p Firmware Version < naplespi_1.0.0.h
   AmdEpyc 7351p Version-
AmdEpyc 7371 Firmware Version < naplespi_1.0.0.h
   AmdEpyc 7371 Version-
AmdEpyc 7401 Firmware Version < naplespi_1.0.0.h
   AmdEpyc 7401 Version-
AmdEpyc 7401p Firmware Version < naplespi_1.0.0.h
   AmdEpyc 7401p Version-
AmdEpyc 7451 Firmware Version < naplespi_1.0.0.h
   AmdEpyc 7451 Version-
AmdEpyc 7501 Firmware Version < naplespi_1.0.0.h
   AmdEpyc 7501 Version-
AmdEpyc 7551 Firmware Version < naplespi_1.0.0.h
   AmdEpyc 7551 Version-
AmdEpyc 7551p Firmware Version < naplespi_1.0.0.h
   AmdEpyc 7551p Version-
AmdEpyc 7601 Firmware Version < naplespi_1.0.0.h
   AmdEpyc 7601 Version-
AmdEpyc 7002 Firmware Version < romepi_1.0.0.d
   AmdEpyc 7002 Version-
AmdEpyc 7232p Firmware Version < romepi_1.0.0.d
   AmdEpyc 7232p Version-
AmdEpyc 7252 Firmware Version < romepi_1.0.0.d
   AmdEpyc 7252 Version-
AmdEpyc 7262 Firmware Version < romepi_1.0.0.d
   AmdEpyc 7262 Version-
AmdEpyc 7272 Firmware Version < romepi_1.0.0.d
   AmdEpyc 7272 Version-
AmdEpyc 7282 Firmware Version < romepi_1.0.0.d
   AmdEpyc 7282 Version-
AmdEpyc 7302 Firmware Version < romepi_1.0.0.d
   AmdEpyc 7302 Version-
AmdEpyc 7302p Firmware Version < romepi_1.0.0.d
   AmdEpyc 7302p Version-
AmdEpyc 7352 Firmware Version < romepi_1.0.0.d
   AmdEpyc 7352 Version-
AmdEpyc 7402 Firmware Version < romepi_1.0.0.d
   AmdEpyc 7402 Version-
AmdEpyc 7402p Firmware Version < romepi_1.0.0.d
   AmdEpyc 7402p Version-
AmdEpyc 7452 Firmware Version < romepi_1.0.0.d
   AmdEpyc 7452 Version-
AmdEpyc 7502 Firmware Version < romepi_1.0.0.d
   AmdEpyc 7502 Version-
AmdEpyc 7532 Firmware Version < romepi_1.0.0.d
   AmdEpyc 7532 Version-
AmdEpyc 7542 Firmware Version < romepi_1.0.0.d
   AmdEpyc 7542 Version-
AmdEpyc 7552 Firmware Version < romepi_1.0.0.d
   AmdEpyc 7552 Version-
AmdEpyc 7642 Firmware Version < romepi_1.0.0.d
   AmdEpyc 7642 Version-
AmdEpyc 7662 Firmware Version < romepi_1.0.0.d
   AmdEpyc 7662 Version-
AmdEpyc 7702 Firmware Version < romepi_1.0.0.d
   AmdEpyc 7702 Version-
AmdEpyc 7702p Firmware Version < romepi_1.0.0.d
   AmdEpyc 7702p Version-
AmdEpyc 7f32 Firmware Version < romepi_1.0.0.d
   AmdEpyc 7f32 Version-
AmdEpyc 7f52 Firmware Version < romepi_1.0.0.d
   AmdEpyc 7f52 Version-
AmdEpyc 7f72 Firmware Version < romepi_1.0.0.d
   AmdEpyc 7f72 Version-
AmdEpyc 7h12 Firmware Version < romepi_1.0.0.d
   AmdEpyc 7h12 Version-
AmdEpyc 7742 Firmware Version < romepi_1.0.0.d
   AmdEpyc 7742 Version-
AmdEpyc 7773x Firmware Version < milanpi_1.0.0.6
   AmdEpyc 7773x Version-
AmdEpyc 7763 Firmware Version < milanpi_1.0.0.6
   AmdEpyc 7763 Version-
AmdEpyc 7713p Firmware Version < milanpi_1.0.0.6
   AmdEpyc 7713p Version-
AmdEpyc 7713 Firmware Version < milanpi_1.0.0.6
   AmdEpyc 7713 Version-
AmdEpyc 7663 Firmware Version < milanpi_1.0.0.6
   AmdEpyc 7663 Version-
AmdEpyc 7643 Firmware Version < milanpi_1.0.0.6
   AmdEpyc 7643 Version-
AmdEpyc 75f3 Firmware Version < milanpi_1.0.0.6
   AmdEpyc 75f3 Version-
AmdEpyc 7573x Firmware Version < milanpi_1.0.0.6
   AmdEpyc 7573x Version-
AmdEpyc 7543p Firmware Version < milanpi_1.0.0.6
   AmdEpyc 7543p Version-
AmdEpyc 7543 Firmware Version < milanpi_1.0.0.6
   AmdEpyc 7543 Version-
AmdEpyc 7513 Firmware Version < milanpi_1.0.0.6
   AmdEpyc 7513 Version-
AmdEpyc 74f3 Firmware Version < milanpi_1.0.0.6
   AmdEpyc 74f3 Version-
AmdEpyc 7473x Firmware Version < milanpi_1.0.0.6
   AmdEpyc 7473x Version-
AmdEpyc 7443p Firmware Version < milanpi_1.0.0.6
   AmdEpyc 7443p Version-
AmdEpyc 7443 Firmware Version < milanpi_1.0.0.6
   AmdEpyc 7443 Version-
AmdEpyc 7453 Firmware Version < milanpi_1.0.0.6
   AmdEpyc 7453 Version-
AmdEpyc 7413 Firmware Version < milanpi_1.0.0.6
   AmdEpyc 7413 Version-
AmdEpyc 7373x Firmware Version < milanpi_1.0.0.6
   AmdEpyc 7373x Version-
AmdEpyc 7313 Firmware Version < milanpi_1.0.0.6
   AmdEpyc 7313 Version-
AmdEpyc 7313p Firmware Version < milanpi_1.0.0.6
   AmdEpyc 7313p Version-
AmdEpyc 7343 Firmware Version < milanpi_1.0.0.6
   AmdEpyc 7343 Version-
AmdEpyc 72f3 Firmware Version < milanpi_1.0.0.6
   AmdEpyc 72f3 Version-
AmdRyzen 9 3950x Firmware Version-
   AmdRyzen 9 3950x Version-
AmdRyzen 9 3950xt Firmware Version-
   AmdRyzen 9 3950xt Version-
AmdRyzen 9 3900 Firmware Version-
   AmdRyzen 9 3900 Version-
AmdRyzen 9 3900x Firmware Version-
   AmdRyzen 9 3900x Version-
AmdRyzen 7 3800x Firmware Version-
   AmdRyzen 7 3800x Version-
AmdRyzen 7 3800xt Firmware Version-
   AmdRyzen 7 3800xt Version-
AmdRyzen 7 3700xt Firmware Version-
   AmdRyzen 7 3700xt Version-
AmdRyzen 5 3600x Firmware Version-
   AmdRyzen 5 3600x Version-
AmdRyzen 5 3600xt Firmware Version-
   AmdRyzen 5 3600xt Version-
AmdRyzen 5 3600 Firmware Version-
   AmdRyzen 5 3600 Version-
AmdRyzen 5 3500x Firmware Version-
   AmdRyzen 5 3500x Version-
AmdRyzen 5 3500 Firmware Version-
   AmdRyzen 5 3500 Version-
AmdRyzen 3 3300x Firmware Version-
   AmdRyzen 3 3300x Version-
AmdRyzen 3 3100 Firmware Version-
   AmdRyzen 3 3100 Version-
AmdRyzen 9 5950x Firmware Version < comboam4_v2_pi_1.2.0.6
   AmdRyzen 9 5950x Version-
AmdRyzen 9 5900x Firmware Version < comboam4_v2_pi_1.2.0.6
   AmdRyzen 9 5900x Version-
AmdRyzen 9 5900 Firmware Version < comboam4_v2_pi_1.2.0.6
   AmdRyzen 9 5900 Version-
AmdRyzen 7 5800x3d Firmware Version < comboam4_v2_pi_1.2.0.6
   AmdRyzen 7 5800x3d Version-
AmdRyzen 7 5800x Firmware Version < comboam4_v2_pi_1.2.0.6
   AmdRyzen 7 5800x Version-
AmdRyzen 7 5800 Firmware Version < comboam4_v2_pi_1.2.0.6
   AmdRyzen 7 5800 Version-
AmdRyzen 7 5700x Firmware Version < comboam4_v2_pi_1.2.0.6
   AmdRyzen 7 5700x Version-
AmdRyzen 5 5600 Firmware Version < comboam4_v2_pi_1.2.0.6
   AmdRyzen 5 5600 Version-
AmdRyzen 5 5600x Firmware Version < comboam4_v2_pi_1.2.0.6
   AmdRyzen 5 5600x Version-
AmdRyzen 5 5500 Firmware Version < comboam4_v2_pi_1.2.0.6
   AmdRyzen 5 5500 Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.14% 0.3
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.4 2.2 5.2
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
134c704f-9b21-4f2e-91b3-4a467353bcc0 7.4 2.2 5.2
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition

The product checks the state of a resource before using that resource, but the resource's state can change between the check and the use in a way that invalidates the results of the check. This can cause the product to perform invalid actions when the resource is in an unexpected state.