CVE-2021-26315

🗓️ 16 Nov 2021 18:12:07Reported by AMDType

When AMD PSP boot rom loads, authenticates & decrypts firmware, insufficient verification allows arbitrary code execution

Reporter	Title	Published	Views	Family All 9
Amd	AMD Server Vulnerabilities – November 2021	8 Nov 202100:00	–	amd
Amd	MilanLaunchy Firmware Loader	12 May 202600:00	–	amd
CNNVD	AMD Platform Security Processor 数据伪造问题漏洞	12 Nov 202100:00	–	cnnvd
Cvelist	CVE-2021-26315	16 Nov 202118:12	–	cvelist
EUVD	EUVD-2021-13121	7 Oct 202500:30	–	euvd
NVD	CVE-2021-26315	16 Nov 202119:15	–	nvd
OSV	CVE-2021-26315	16 Nov 202119:15	–	osv
Prion	Design/Logic Flaw	16 Nov 202119:15	–	prion
SUSE CVE	SUSE CVE-2021-26315	15 Feb 202303:44	–	susecve

NVD

Node

amd epyc_7003_firmwareRange<milanpi-sp3_1.0.0.4

AND

amd epyc_7003Match-

Node

amd epyc_72f3_firmwareRange<milanpi-sp3_1.0.0.4

AND

amd epyc_72f3Match-

Node

amd epyc_7313_firmwareRange<milanpi-sp3_1.0.0.4

AND

amd epyc_7313Match-

Node

amd epyc_7313p_firmwareRange<milanpi-sp3_1.0.0.4

AND

amd epyc_7313pMatch-

Node

amd epyc_7343_firmwareRange<milanpi-sp3_1.0.0.4

AND

amd epyc_7343Match-

Node

amd epyc_73f3_firmwareRange<milanpi-sp3_1.0.0.4

AND

amd epyc_73f3Match-

Node

amd epyc_7413_firmwareRange<milanpi-sp3_1.0.0.4

AND

amd epyc_7413Match-

Node

amd epyc_7443_firmwareRange<milanpi-sp3_1.0.0.4

AND

amd epyc_7443Match-

Node

amd epyc_7443p_firmwareRange<milanpi-sp3_1.0.0.4

AND

amd epyc_7443pMatch-

Node

amd epyc_7453_firmwareRange<milanpi-sp3_1.0.0.4

AND

amd epyc_7453Match-

Node

amd epyc_74f3_firmwareRange<milanpi-sp3_1.0.0.4

AND

amd epyc_74f3Match-

Node

amd epyc_7513_firmwareRange<milanpi-sp3_1.0.0.4

AND

amd epyc_7513Match-

Node

amd epyc_7543_firmwareRange<milanpi-sp3_1.0.0.4

AND

amd epyc_7543Match-

Node

amd epyc_7543p_firmwareRange<milanpi-sp3_1.0.0.4

AND

amd epyc_7543pMatch-

Node

amd epyc_75f3_firmwareRange<milanpi-sp3_1.0.0.4

AND

amd epyc_75f3Match-

Node

amd epyc_7643_firmwareRange<milanpi-sp3_1.0.0.4

AND

amd epyc_7643Match-

Node

amd epyc_7663_firmwareRange<milanpi-sp3_1.0.0.4

AND

amd epyc_7663Match-

Node

amd epyc_7713_firmwareRange<milanpi-sp3_1.0.0.4

AND

amd epyc_7713Match-

Node

amd epyc_7713p_firmwareRange<milanpi-sp3_1.0.0.4

AND

amd epyc_7713pMatch-

Node

amd epyc_7763_firmwareRange<milanpi-sp3_1.0.0.4

AND

amd epyc_7763Match-

[
  {
    "product": "3rd Gen AMD EPYC™",
    "vendor": "AMD",
    "versions": [
      {
        "lessThan": "MilanPI-SP3_1.0.0.4",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
amd	www.amd.com/en/corporate/product-security/bulletin/amd-sb-1021

21 Nov 2024 05:56Current

7.7High risk

Vulners AI Score7.7

CVSS 24.6

CVSS 3.17.8

EPSS0.00064

CWE-345