CVE-2021-26356

🗓️ 09 May 2023 18:58:48Reported by AMDType

A TOCTOU in ASP bootloader may allow tampering with SPI ROM, resulting in S3 data corruption and information disclosure

Reporter	Title	Published	Views	Family All 12
Amd	AMD Server Vulnerabilities – May 2023	9 May 202300:00	–	amd
Amd	Client Vulnerabilities – May 2023	9 May 202300:00	–	amd
Circl	CVE-2021-26356	9 May 202322:39	–	circl
CNNVD	AMD Secure Processor和AMD System Management Unit 安全漏洞	9 May 202300:00	–	cnnvd
Cvelist	CVE-2021-26356	9 May 202318:58	–	cvelist
EUVD	EUVD-2021-13162	7 Oct 202500:30	–	euvd
Hewlett-Packard	AMD Client UEFI Firmware May 2023 Security Update	9 May 202300:00	–	hp
NVD	CVE-2021-26356	9 May 202319:15	–	nvd
OSV	CVE-2021-26356	9 May 202319:15	–	osv
Prion	Information disclosure	9 May 202319:15	–	prion

NVD

Node

amd epyc_7001_firmwareRange<naplespi_1.0.0.h

AND

amd epyc_7001Match-

Node

amd epyc_7251_firmwareRange<naplespi_1.0.0.h

AND

amd epyc_7251Match-

Node

amd epyc_7261_firmwareRange<naplespi_1.0.0.h

AND

amd epyc_7261Match-

Node

amd epyc_7281_firmwareRange<naplespi_1.0.0.h

AND

amd epyc_7281Match-

Node

amd epyc_7301_firmwareRange<naplespi_1.0.0.h

AND

amd epyc_7301Match-

Node

amd epyc_7351_firmwareRange<naplespi_1.0.0.h

AND

amd epyc_7351Match-

Node

amd epyc_7351p_firmwareRange<naplespi_1.0.0.h

AND

amd epyc_7351pMatch-

Node

amd epyc_7371_firmwareRange<naplespi_1.0.0.h

AND

amd epyc_7371Match-

Node

amd epyc_7401_firmwareRange<naplespi_1.0.0.h

AND

amd epyc_7401Match-

Node

amd epyc_7401p_firmwareRange<naplespi_1.0.0.h

AND

amd epyc_7401pMatch-

Node

amd epyc_7451_firmwareRange<naplespi_1.0.0.h

AND

amd epyc_7451Match-

Node

amd epyc_7501_firmwareRange<naplespi_1.0.0.h

AND

amd epyc_7501Match-

Node

amd epyc_7551_firmwareRange<naplespi_1.0.0.h

AND

amd epyc_7551Match-

Node

amd epyc_7551p_firmwareRange<naplespi_1.0.0.h

AND

amd epyc_7551pMatch-

Node

amd epyc_7601_firmwareRange<naplespi_1.0.0.h

AND

amd epyc_7601Match-

Node

amd epyc_7002_firmwareRange<romepi_1.0.0.d

AND

amd epyc_7002Match-

Node

amd epyc_7232p_firmwareRange<romepi_1.0.0.d

AND

amd epyc_7232pMatch-

Node

amd epyc_7252_firmwareRange<romepi_1.0.0.d

AND

amd epyc_7252Match-

Node

amd epyc_7262_firmwareRange<romepi_1.0.0.d

AND

amd epyc_7262Match-

Node

amd epyc_7272_firmwareRange<romepi_1.0.0.d

AND

amd epyc_7272Match-

Node

amd epyc_7282_firmwareRange<romepi_1.0.0.d

AND

amd epyc_7282Match-

Node

amd epyc_7302_firmwareRange<romepi_1.0.0.d

AND

amd epyc_7302Match-

Node

amd epyc_7302p_firmwareRange<romepi_1.0.0.d

AND

amd epyc_7302pMatch-

Node

amd epyc_7352_firmwareRange<romepi_1.0.0.d

AND

amd epyc_7352Match-

Node

amd epyc_7402_firmwareRange<romepi_1.0.0.d

AND

amd epyc_7402Match-

Node

amd epyc_7402p_firmwareRange<romepi_1.0.0.d

AND

amd epyc_7402pMatch-

Node

amd epyc_7452_firmwareRange<romepi_1.0.0.d

AND

amd epyc_7452Match-

Node

amd epyc_7502_firmwareRange<romepi_1.0.0.d

AND

amd epyc_7502Match-

Node

amd epyc_7532_firmwareRange<romepi_1.0.0.d

AND

amd epyc_7532Match-

Node

amd epyc_7542_firmwareRange<romepi_1.0.0.d

AND

amd epyc_7542Match-

Node

amd epyc_7552_firmwareRange<romepi_1.0.0.d

AND

amd epyc_7552Match-

Node

amd epyc_7642_firmwareRange<romepi_1.0.0.d

AND

amd epyc_7642Match-

Node

amd epyc_7662_firmwareRange<romepi_1.0.0.d

AND

amd epyc_7662Match-

Node

amd epyc_7702_firmwareRange<romepi_1.0.0.d

AND

amd epyc_7702Match-

Node

amd epyc_7702p_firmwareRange<romepi_1.0.0.d

AND

amd epyc_7702pMatch-

Node

amd epyc_7f32_firmwareRange<romepi_1.0.0.d

AND

amd epyc_7f32Match-

Node

amd epyc_7f52_firmwareRange<romepi_1.0.0.d

AND

amd epyc_7f52Match-

Node

amd epyc_7f72_firmwareRange<romepi_1.0.0.d

AND

amd epyc_7f72Match-

Node

amd epyc_7h12_firmwareRange<romepi_1.0.0.d

AND

amd epyc_7h12Match-

Node

amd epyc_7742_firmwareRange<romepi_1.0.0.d

AND

amd epyc_7742Match-

Node

amd epyc_7773x_firmwareRange<milanpi_1.0.0.6

AND

amd epyc_7773xMatch-

Node

amd epyc_7763_firmwareRange<milanpi_1.0.0.6

AND

amd epyc_7763Match-

Node

amd epyc_7713p_firmwareRange<milanpi_1.0.0.6

AND

amd epyc_7713pMatch-

Node

amd epyc_7713_firmwareRange<milanpi_1.0.0.6

AND

amd epyc_7713Match-

Node

amd epyc_7663_firmwareRange<milanpi_1.0.0.6

AND

amd epyc_7663Match-

Node

amd epyc_7643_firmwareRange<milanpi_1.0.0.6

AND

amd epyc_7643Match-

Node

amd epyc_75f3_firmwareRange<milanpi_1.0.0.6

AND

amd epyc_75f3Match-

Node

amd epyc_7573x_firmwareRange<milanpi_1.0.0.6

AND

amd epyc_7573xMatch-

Node

amd epyc_7543p_firmwareRange<milanpi_1.0.0.6

AND

amd epyc_7543pMatch-

Node

amd epyc_7543_firmwareRange<milanpi_1.0.0.6

AND

amd epyc_7543Match-

Node

amd epyc_7513_firmwareRange<milanpi_1.0.0.6

AND

amd epyc_7513Match-

Node

amd epyc_74f3_firmwareRange<milanpi_1.0.0.6

AND

amd epyc_74f3Match-

Node

amd epyc_7473x_firmwareRange<milanpi_1.0.0.6

AND

amd epyc_7473xMatch-

Node

amd epyc_7443p_firmwareRange<milanpi_1.0.0.6

AND

amd epyc_7443pMatch-

Node

amd epyc_7443_firmwareRange<milanpi_1.0.0.6

AND

amd epyc_7443Match-

Node

amd epyc_7453_firmwareRange<milanpi_1.0.0.6

AND

amd epyc_7453Match-

Node

amd epyc_7413_firmwareRange<milanpi_1.0.0.6

AND

amd epyc_7413Match-

Node

amd epyc_7373x_firmwareRange<milanpi_1.0.0.6

AND

amd epyc_7373xMatch-

Node

amd epyc_7313_firmwareRange<milanpi_1.0.0.6

AND

amd epyc_7313Match-

Node

amd epyc_7313p_firmwareRange<milanpi_1.0.0.6

AND

amd epyc_7313pMatch-

Node

amd epyc_7343_firmwareRange<milanpi_1.0.0.6

AND

amd epyc_7343Match-

Node

amd epyc_72f3_firmwareRange<milanpi_1.0.0.6

AND

amd epyc_72f3Match-

Node

amd ryzen_9_3950x_firmwareMatch-

AND

amd ryzen_9_3950xMatch-

Node

amd ryzen_9_3950xt_firmwareMatch-

AND

amd ryzen_9_3950xtMatch-

Node

amd ryzen_9_3900_firmwareMatch-

AND

amd ryzen_9_3900Match-

Node

amd ryzen_9_3900x_firmwareMatch-

AND

amd ryzen_9_3900xMatch-

Node

amd ryzen_7_3800x_firmwareMatch-

AND

amd ryzen_7_3800xMatch-

Node

amd ryzen_7_3800xt_firmwareMatch-

AND

amd ryzen_7_3800xtMatch-

Node

amd ryzen_7_3700xt_firmwareMatch-

AND

amd ryzen_7_3700xtMatch-

Node

amd ryzen_5_3600x_firmwareMatch-

AND

amd ryzen_5_3600xMatch-

Node

amd ryzen_5_3600xt_firmwareMatch-

AND

amd ryzen_5_3600xtMatch-

Node

amd ryzen_5_3600_firmwareMatch-

AND

amd ryzen_5_3600Match-

Node

amd ryzen_5_3500x_firmwareMatch-

AND

amd ryzen_5_3500xMatch-

Node

amd ryzen_5_3500_firmwareMatch-

AND

amd ryzen_5_3500Match-

Node

amd ryzen_3_3300x_firmwareMatch-

AND

amd ryzen_3_3300xMatch-

Node

amd ryzen_3_3100_firmwareMatch-

AND

amd ryzen_3_3100Match-

Node

amd ryzen_9_5950x_firmwareRange<comboam4_v2_pi_1.2.0.6

AND

amd ryzen_9_5950xMatch-

Node

amd ryzen_9_5900x_firmwareRange<comboam4_v2_pi_1.2.0.6

AND

amd ryzen_9_5900xMatch-

Node

amd ryzen_9_5900_firmwareRange<comboam4_v2_pi_1.2.0.6

AND

amd ryzen_9_5900Match-

Node

amd ryzen_7_5800x3d_firmwareRange<comboam4_v2_pi_1.2.0.6

AND

amd ryzen_7_5800x3dMatch-

Node

amd ryzen_7_5800x_firmwareRange<comboam4_v2_pi_1.2.0.6

AND

amd ryzen_7_5800xMatch-

Node

amd ryzen_7_5800_firmwareRange<comboam4_v2_pi_1.2.0.6

AND

amd ryzen_7_5800Match-

Node

amd ryzen_7_5700x_firmwareRange<comboam4_v2_pi_1.2.0.6

AND

amd ryzen_7_5700xMatch-

Node

amd ryzen_5_5600_firmwareRange<comboam4_v2_pi_1.2.0.6

AND

amd ryzen_5_5600Match-

Node

amd ryzen_5_5600x_firmwareRange<comboam4_v2_pi_1.2.0.6

AND

amd ryzen_5_5600xMatch-

Node

amd ryzen_5_5500_firmwareRange<comboam4_v2_pi_1.2.0.6

AND

amd ryzen_5_5500Match-

Node

amd ryzen_threadripper_3990x_firmwareMatch-

AND

amd ryzen_threadripper_3990xMatch-

Node

amd ryzen_threadripper_3970x_firmwareMatch-

AND

amd ryzen_threadripper_3970xMatch-

Node

amd ryzen_threadripper_3960x_firmwareMatch-

AND

amd ryzen_threadripper_3960xMatch-

Node

amd ryzen_threadripper_pro_3995wx_firmwareMatch-

AND

amd ryzen_threadripper_pro_3995wxMatch-

Node

amd ryzen_threadripper_pro_3975wx_firmwareMatch-

AND

amd ryzen_threadripper_pro_3975wxMatch-

Node

amd ryzen_threadripper_pro_3955wx_firmwareMatch-

AND

amd ryzen_threadripper_pro_3955wxMatch-

Node

amd ryzen_threadripper_pro_3945wx_firmwareMatch-

AND

amd ryzen_threadripper_pro_3945wxMatch-

Node

amd ryzen_threadripper_pro_5955wx_firmwareMatch-

AND

amd ryzen_threadripper_pro_5955wxMatch-

Node

amd ryzen_threadripper_pro_5965wx_firmwareMatch-

AND

amd ryzen_threadripper_pro_5965wxMatch-

Node

amd ryzen_threadripper_pro_5945wx_firmwareMatch-

AND

amd ryzen_threadripper_pro_5945wxMatch-

Node

amd ryzen_threadripper_pro_5975wx_firmwareMatch-

AND

amd ryzen_threadripper_pro_5975wxMatch-

Node

amd ryzen_threadripper_pro_5995wx_firmwareMatch-

AND

amd ryzen_threadripper_pro_5995wxMatch-

[
  {
    "defaultStatus": "unaffected",
    "packageName": "AGESA",
    "platforms": [
      "x86"
    ],
    "product": "Ryzen™ 3000 Series Desktop Processors “Matisse” AM4",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various "
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "packageName": "AGESA",
    "platforms": [
      "x86"
    ],
    "product": "AMD Ryzen™ 5000 Series Desktop Processors “Vermeer” AM4",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various "
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "packageName": "AGESA",
    "platforms": [
      "x86"
    ],
    "product": "3rd Gen AMD Ryzen™ Threadripper™ Processors “Castle Peak” HEDT",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "packageName": "AGESA",
    "platforms": [
      "x86"
    ],
    "product": "Ryzen™ Threadripper™ PRO Processors “Castle Peak” WS",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various "
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "packageName": "AGESA",
    "platforms": [
      "x86"
    ],
    "product": "Ryzen™ Threadripper™ PRO Processors “Chagall” WS",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various "
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "packageName": "AGESA",
    "platforms": [
      "x86"
    ],
    "product": "1st Gen AMD EPYC™ Processors",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various "
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "packageName": "AGESA",
    "platforms": [
      "x86"
    ],
    "product": "2nd Gen AMD EPYC™ Processors",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various "
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "packageName": "AGESA",
    "platforms": [
      "x86"
    ],
    "product": "3rd Gen AMD EPYC™ Processors",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various "
      }
    ]
  }
]

Source	Link
amd	www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3001
amd	www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4001

28 Jan 2025 16:15Current

8.4High risk

Vulners AI Score8.4

CVSS 3.17.4

EPSS0.00271

SSVC

CWE-367