4.4

CVE-2021-26396

Insufficient validation of address mapping to IO in ASP (AMD Secure Processor) may result in a loss of memory integrity in the SNP guest.

Data is provided by the National Vulnerability Database (NVD)
Amd ≫ Epyc 7003 Firmware Version < milanpi-sp3_1.0.0.9
   Amd ≫ Epyc 7003 Version-
Amd ≫ Epyc 72f3 Firmware Version < milanpi-sp3_1.0.0.9
   Amd ≫ Epyc 72f3 Version-
Amd ≫ Epyc 7313 Firmware Version < milanpi-sp3_1.0.0.9
   Amd ≫ Epyc 7313 Version-
Amd ≫ Epyc 7313p Firmware Version < milanpi-sp3_1.0.0.9
   Amd ≫ Epyc 7313p Version-
Amd ≫ Epyc 7343 Firmware Version < milanpi-sp3_1.0.0.9
   Amd ≫ Epyc 7343 Version-
Amd ≫ Epyc 7373x Firmware Version < milanpi-sp3_1.0.0.9
   Amd ≫ Epyc 7373x Version-
Amd ≫ Epyc 73f3 Firmware Version < milanpi-sp3_1.0.0.9
   Amd ≫ Epyc 73f3 Version-
Amd ≫ Epyc 7413 Firmware Version < milanpi-sp3_1.0.0.9
   Amd ≫ Epyc 7413 Version-
Amd ≫ Epyc 7443 Firmware Version < milanpi-sp3_1.0.0.9
   Amd ≫ Epyc 7443 Version-
Amd ≫ Epyc 7443p Firmware Version < milanpi-sp3_1.0.0.9
   Amd ≫ Epyc 7443p Version-
Amd ≫ Epyc 7453 Firmware Version < milanpi-sp3_1.0.0.9
   Amd ≫ Epyc 7453 Version-
Amd ≫ Epyc 74f3 Firmware Version < milanpi-sp3_1.0.0.9
   Amd ≫ Epyc 74f3 Version-
Amd ≫ Epyc 7513 Firmware Version < milanpi-sp3_1.0.0.9
   Amd ≫ Epyc 7513 Version-
Amd ≫ Epyc 7543 Firmware Version < milanpi-sp3_1.0.0.9
   Amd ≫ Epyc 7543 Version-
Amd ≫ Epyc 7543p Firmware Version < milanpi-sp3_1.0.0.9
   Amd ≫ Epyc 7543p Version-
Amd ≫ Epyc 7573x Firmware Version < milanpi-sp3_1.0.0.9
   Amd ≫ Epyc 7573x Version-
Amd ≫ Epyc 75f3 Firmware Version < milanpi-sp3_1.0.0.9
   Amd ≫ Epyc 75f3 Version-
Amd ≫ Epyc 7643 Firmware Version < milanpi-sp3_1.0.0.9
   Amd ≫ Epyc 7643 Version-
Amd ≫ Epyc 7663 Firmware Version < milanpi-sp3_1.0.0.9
   Amd ≫ Epyc 7663 Version-
Amd ≫ Epyc 7713 Firmware Version < milanpi-sp3_1.0.0.9
   Amd ≫ Epyc 7713 Version-
Amd ≫ Epyc 7713p Firmware Version < milanpi-sp3_1.0.0.9
   Amd ≫ Epyc 7713p Version-
Amd ≫ Epyc 7743 Firmware Version < milanpi-sp3_1.0.0.9
   Amd ≫ Epyc 7743 Version-
Amd ≫ Epyc 7763 Firmware Version < milanpi-sp3_1.0.0.9
   Amd ≫ Epyc 7763 Version-
Amd ≫ Epyc 7773x Firmware Version < milanpi-sp3_1.0.0.9
   Amd ≫ Epyc 7773x Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.02% 0.05
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 4.4 1.8 2.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
134c704f-9b21-4f2e-91b3-4a467353bcc0 4.4 1.8 2.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
CWE-345 Insufficient Verification of Data Authenticity

The product does not sufficiently verify the origin or authenticity of data, in a way that causes it to accept invalid data.