CVE-2021-26360

EPSS 0.04%
Published 09.11.2022 21:15:11
Last modified 01.05.2025 15:15:54
Source psirt@amd.com
Teams watchlist Login
Open Login

An attacker with local access to the system can make unauthorized modifications of the security configuration of the SOC registers. This could allow potential corruption of AMD secure processor’s encrypted memory contents which may lead to arbitrary code execution in ASP.

Affected products Warnungen 0 Metrics 3 CWE 1 References 4

Data is provided by the National Vulnerability Database (NVD)

Amd ≫ Enterprise Driver Version < 22.10.20

   Amd ≫ Radeon Pro W6300m Version-
   Amd ≫ Radeon Pro W6400 Version-
   Amd ≫ Radeon Pro W6500m Version-
   Amd ≫ Radeon Pro W6600 Version-
   Amd ≫ Radeon Pro W6600m Version-
   Amd ≫ Radeon Pro W6600x Version-
   Amd ≫ Radeon Pro W6800 Version-
   Amd ≫ Radeon Pro W6800x Version-
   Amd ≫ Radeon Pro W6800x Duo Version-
   Amd ≫ Radeon Pro W6900x Version-
   Amd ≫ Radeon Rx 6300m Version-
   Amd ≫ Radeon Rx 6400 Version-
   Amd ≫ Radeon Rx 6500 Xt Version-
   Amd ≫ Radeon Rx 6500m Version-
   Amd ≫ Radeon Rx 6600 Version-
   Amd ≫ Radeon Rx 6600 Xt Version-
   Amd ≫ Radeon Rx 6600m Version-
   Amd ≫ Radeon Rx 6600s Version-
   Amd ≫ Radeon Rx 6650 Xt Version-
   Amd ≫ Radeon Rx 6650m Version-
   Amd ≫ Radeon Rx 6650m Xt Version-
   Amd ≫ Radeon Rx 6700 Version-
   Amd ≫ Radeon Rx 6700 Xt Version-
   Amd ≫ Radeon Rx 6700m Version-
   Amd ≫ Radeon Rx 6700s Version-
   Amd ≫ Radeon Rx 6750 Xt Version-
   Amd ≫ Radeon Rx 6800 Version-
   Amd ≫ Radeon Rx 6800 Xt Version-
   Amd ≫ Radeon Rx 6800m Version-
   Amd ≫ Radeon Rx 6800s Version-
   Amd ≫ Radeon Rx 6850m Xt Version-
   Amd ≫ Radeon Rx 6900 Xt Version-
   Amd ≫ Radeon Rx 6950 Xt Version-

Amd ≫ Radeon Pro Software SwEditionenterprise Version < 22.q2

Amd ≫ Radeon Software Version < 22.5.2

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.04%	0.119

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	7.8	1.8	5.9	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
134c704f-9b21-4f2e-91b3-4a467353bcc0	7.8	1.8	5.9	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-284 Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1029

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2021-26360

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2021-26360

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2021-26360

EUVD