4.4

CVE-2021-26396

Insufficient validation of address mapping to IO in ASP (AMD Secure Processor) may result in a loss of memory integrity in the SNP guest.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Amd ≫ Epyc 7003 Firmware Version < milanpi-sp3_1.0.0.9
   Amd ≫ Epyc 7003 Version -
Amd ≫ Epyc 72f3 Firmware Version < milanpi-sp3_1.0.0.9
   Amd ≫ Epyc 72f3 Version -
Amd ≫ Epyc 7313 Firmware Version < milanpi-sp3_1.0.0.9
   Amd ≫ Epyc 7313 Version -
Amd ≫ Epyc 7313p Firmware Version < milanpi-sp3_1.0.0.9
   Amd ≫ Epyc 7313p Version -
Amd ≫ Epyc 7343 Firmware Version < milanpi-sp3_1.0.0.9
   Amd ≫ Epyc 7343 Version -
Amd ≫ Epyc 7373x Firmware Version < milanpi-sp3_1.0.0.9
   Amd ≫ Epyc 7373x Version -
Amd ≫ Epyc 73f3 Firmware Version < milanpi-sp3_1.0.0.9
   Amd ≫ Epyc 73f3 Version -
Amd ≫ Epyc 7413 Firmware Version < milanpi-sp3_1.0.0.9
   Amd ≫ Epyc 7413 Version -
Amd ≫ Epyc 7443 Firmware Version < milanpi-sp3_1.0.0.9
   Amd ≫ Epyc 7443 Version -
Amd ≫ Epyc 7443p Firmware Version < milanpi-sp3_1.0.0.9
   Amd ≫ Epyc 7443p Version -
Amd ≫ Epyc 7453 Firmware Version < milanpi-sp3_1.0.0.9
   Amd ≫ Epyc 7453 Version -
Amd ≫ Epyc 74f3 Firmware Version < milanpi-sp3_1.0.0.9
   Amd ≫ Epyc 74f3 Version -
Amd ≫ Epyc 7513 Firmware Version < milanpi-sp3_1.0.0.9
   Amd ≫ Epyc 7513 Version -
Amd ≫ Epyc 7543 Firmware Version < milanpi-sp3_1.0.0.9
   Amd ≫ Epyc 7543 Version -
Amd ≫ Epyc 7543p Firmware Version < milanpi-sp3_1.0.0.9
   Amd ≫ Epyc 7543p Version -
Amd ≫ Epyc 7573x Firmware Version < milanpi-sp3_1.0.0.9
   Amd ≫ Epyc 7573x Version -
Amd ≫ Epyc 75f3 Firmware Version < milanpi-sp3_1.0.0.9
   Amd ≫ Epyc 75f3 Version -
Amd ≫ Epyc 7643 Firmware Version < milanpi-sp3_1.0.0.9
   Amd ≫ Epyc 7643 Version -
Amd ≫ Epyc 7663 Firmware Version < milanpi-sp3_1.0.0.9
   Amd ≫ Epyc 7663 Version -
Amd ≫ Epyc 7713 Firmware Version < milanpi-sp3_1.0.0.9
   Amd ≫ Epyc 7713 Version -
Amd ≫ Epyc 7713p Firmware Version < milanpi-sp3_1.0.0.9
   Amd ≫ Epyc 7713p Version -
Amd ≫ Epyc 7743 Firmware Version < milanpi-sp3_1.0.0.9
   Amd ≫ Epyc 7743 Version -
Amd ≫ Epyc 7763 Firmware Version < milanpi-sp3_1.0.0.9
   Amd ≫ Epyc 7763 Version -
Amd ≫ Epyc 7773x Firmware Version < milanpi-sp3_1.0.0.9
   Amd ≫ Epyc 7773x Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.11% 0.017
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 4.4 1.8 2.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
CISA-ADP 4.4 1.8 2.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
CWE-345 Insufficient Verification of Data Authenticity

The product does not sufficiently verify the origin or authenticity of data, in a way that causes it to accept invalid data.

https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032
Vendor Advisory