9.1
CVE-2021-46756
- EPSS 0.65%
- Veröffentlicht 09.05.2023 20:15:12
- Zuletzt bearbeitet 28.01.2025 16:15:31
- Erkennungen
Insufficient validation of inputs in SVC_MAP_USER_STACK in the ASP (AMD Secure Processor) bootloader may allow an attacker with a malicious Uapp or ABL to send malformed or invalid syscall to the bootloader resulting in a potential denial of service and loss of integrity.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Amd ≫ Epyc 72f3 Firmware Version milanpi_1.0.0.9
Amd ≫ Epyc 7313 Firmware Version milanpi_1.0.0.9
Amd ≫ Epyc 7313p Firmware Version milanpi_1.0.0.9
Amd ≫ Epyc 7343 Firmware Version milanpi_1.0.0.9
Amd ≫ Epyc 7373x Firmware Version milanpi_1.0.0.9
Amd ≫ Epyc 73f3 Firmware Version milanpi_1.0.0.9
Amd ≫ Epyc 7413 Firmware Version milanpi_1.0.0.9
Amd ≫ Epyc 7443 Firmware Version milanpi_1.0.0.9
Amd ≫ Epyc 7443p Firmware Version milanpi_1.0.0.9
Amd ≫ Epyc 7453 Firmware Version milanpi_1.0.0.9
Amd ≫ Epyc 7473x Firmware Version milanpi_1.0.0.9
Amd ≫ Epyc 74f3 Firmware Version milanpi_1.0.0.9
Amd ≫ Epyc 7513 Firmware Version milanpi_1.0.0.9
Amd ≫ Epyc 7543 Firmware Version milanpi_1.0.0.9
Amd ≫ Epyc 7543p Firmware Version milanpi_1.0.0.9
Amd ≫ Epyc 7573x Firmware Version milanpi_1.0.0.9
Amd ≫ Epyc 75f3 Firmware Version milanpi_1.0.0.9
Amd ≫ Epyc 7643 Firmware Version milanpi_1.0.0.9
Amd ≫ Epyc 7663 Firmware Version milanpi_1.0.0.9
Amd ≫ Epyc 7713 Firmware Version milanpi_1.0.0.9
Amd ≫ Epyc 7713p Firmware Version milanpi_1.0.0.9
Amd ≫ Epyc 7763 Firmware Version milanpi_1.0.0.9
Amd ≫ Epyc 7773x Firmware Version milanpi_1.0.0.9
Amd ≫ Epyc 7232p Firmware Version romepi_1.0.0.e
Amd ≫ Epyc 7252 Firmware Version romepi_1.0.0.e
Amd ≫ Epyc 7262 Firmware Version romepi_1.0.0.e
Amd ≫ Epyc 7272 Firmware Version romepi_1.0.0.e
Amd ≫ Epyc 7282 Firmware Version romepi_1.0.0.e
Amd ≫ Epyc 7302 Firmware Version romepi_1.0.0.e
Amd ≫ Epyc 7302p Firmware Version romepi_1.0.0.e
Amd ≫ Epyc 7352 Firmware Version romepi_1.0.0.e
Amd ≫ Epyc 7402 Firmware Version romepi_1.0.0.e
Amd ≫ Epyc 7402p Firmware Version romepi_1.0.0.e
Amd ≫ Epyc 7452 Firmware Version romepi_1.0.0.e
Amd ≫ Epyc 7502 Firmware Version romepi_1.0.0.e
Amd ≫ Epyc 7502p Firmware Version romepi_1.0.0.e
Amd ≫ Epyc 7532 Firmware Version romepi_1.0.0.e
Amd ≫ Epyc 7542 Firmware Version romepi_1.0.0.e
Amd ≫ Epyc 7552 Firmware Version romepi_1.0.0.e
Amd ≫ Epyc 7642 Firmware Version romepi_1.0.0.e
Amd ≫ Epyc 7662 Firmware Version romepi_1.0.0.e
Amd ≫ Epyc 7702 Firmware Version romepi_1.0.0.e
Amd ≫ Epyc 7702p Firmware Version romepi_1.0.0.e
Amd ≫ Epyc 7742 Firmware Version romepi_1.0.0.e
Amd ≫ Epyc 7f32 Firmware Version romepi_1.0.0.e
Amd ≫ Epyc 7f52 Firmware Version romepi_1.0.0.e
Amd ≫ Epyc 7f72 Firmware Version romepi_1.0.0.e
Amd ≫ Epyc 7h12 Firmware Version romepi_1.0.0.e
Amd ≫ Epyc 7251 Firmware Version naplespi_1.0.0.j
Amd ≫ Epyc 7261 Firmware Version naplespi_1.0.0.j
Amd ≫ Epyc 7281 Firmware Version naplespi_1.0.0.j
Amd ≫ Epyc 7301 Firmware Version naplespi_1.0.0.j
Amd ≫ Epyc 7351 Firmware Version naplespi_1.0.0.j
Amd ≫ Epyc 7351p Firmware Version naplespi_1.0.0.j
Amd ≫ Epyc 7371 Firmware Version naplespi_1.0.0.j
Amd ≫ Epyc 7401 Firmware Version naplespi_1.0.0.j
Amd ≫ Epyc 7401p Firmware Version naplespi_1.0.0.j
Amd ≫ Epyc 7451 Firmware Version naplespi_1.0.0.j
Amd ≫ Epyc 7501 Firmware Version naplespi_1.0.0.j
Amd ≫ Epyc 7551 Firmware Version naplespi_1.0.0.j
Amd ≫ Epyc 7551p Firmware Version naplespi_1.0.0.j
Amd ≫ Epyc 7571 Firmware Version naplespi_1.0.0.j
Amd ≫ Epyc 7601 Firmware Version naplespi_1.0.0.j
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.65% | 0.46 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 9.1 | 3.9 | 5.2 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
|
| CISA-ADP | 9.1 | 3.9 | 5.2 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
|
CWE-20 Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3001
https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4001