CVE-2021-26371

🗓️ 09 May 2023 18:59:16Reported by AMDType

ABL/UApp sending SHA256 call to bootloader may expose ASP memory, leading to information disclosure

Reporter	Title	Published	Views	Family All 10
Amd	AMD Server Vulnerabilities – May 2023	9 May 202300:00	–	amd
Amd	Client Vulnerabilities – May 2023	9 May 202300:00	–	amd
CNNVD	AMD Secure Processor和AMD System Management Unit 安全漏洞	9 May 202300:00	–	cnnvd
Cvelist	CVE-2021-26371	9 May 202318:59	–	cvelist
EUVD	EUVD-2021-13177	7 Oct 202500:30	–	euvd
Hewlett-Packard	AMD Client UEFI Firmware May 2023 Security Update	9 May 202300:00	–	hp
NVD	CVE-2021-26371	9 May 202319:15	–	nvd
Prion	Information disclosure	9 May 202319:15	–	prion
Positive Technologies	PT-2023-12093 · Amd · 1St Gen Amd Epyc™ Processors +110	9 May 202300:00	–	ptsecurity
Vulnrichment	CVE-2021-26371	9 May 202318:59	–	vulnrichment

NVD

Node

amd epyc_7773x_firmwareRange<milanpi_1.0.0.6

AND

amd epyc_7773xMatch-

Node

amd epyc_7763_firmwareRange<milanpi_1.0.0.6

AND

amd epyc_7763Match-

Node

amd epyc_7713p_firmwareRange<milanpi_1.0.0.6

AND

amd epyc_7713pMatch-

Node

amd epyc_7713_firmwareRange<milanpi_1.0.0.6

AND

amd epyc_7713Match-

Node

amd epyc_7663_firmwareRange<milanpi_1.0.0.6

AND

amd epyc_7663Match-

Node

amd epyc_7643_firmwareRange<milanpi_1.0.0.6

AND

amd epyc_7643Match-

Node

amd epyc_75f3_firmwareRange<milanpi_1.0.0.6

AND

amd epyc_75f3Match-

Node

amd epyc_7573x_firmwareRange<milanpi_1.0.0.6

AND

amd epyc_7573xMatch-

Node

amd epyc_7543p_firmwareRange<milanpi_1.0.0.6

AND

amd epyc_7543pMatch-

Node

amd epyc_7543_firmwareRange<milanpi_1.0.0.6

AND

amd epyc_7543Match-

Node

amd epyc_7513_firmwareRange<milanpi_1.0.0.6

AND

amd epyc_7513Match-

Node

amd epyc_74f3_firmwareRange<milanpi_1.0.0.6

AND

amd epyc_74f3Match-

Node

amd epyc_7473x_firmwareRange<milanpi_1.0.0.6

AND

amd epyc_7473xMatch-

Node

amd epyc_7453_firmwareRange<milanpi_1.0.0.6

AND

amd epyc_7453Match-

Node

amd epyc_7443p_firmwareRange<milanpi_1.0.0.6

AND

amd epyc_7443pMatch-

Node

amd epyc_7443_firmwareRange<milanpi_1.0.0.6

AND

amd epyc_7443Match-

Node

amd epyc_7413_firmwareRange<milanpi_1.0.0.6

AND

amd epyc_7413Match-

Node

amd epyc_73f3_firmwareRange<milanpi_1.0.0.6

AND

amd epyc_73f3Match-

Node

amd epyc_7373x_firmwareRange<milanpi_1.0.0.6

AND

amd epyc_7373xMatch-

Node

amd epyc_7343_firmwareRange<milanpi_1.0.0.6

AND

amd epyc_7343Match-

Node

amd epyc_7313p_firmwareRange<milanpi_1.0.0.6

AND

amd epyc_7313pMatch-

Node

amd epyc_7313_firmwareRange<milanpi_1.0.0.6

AND

amd epyc_7313Match-

Node

amd epyc_72f3_firmwareRange<milanpi_1.0.0.6

AND

amd epyc_72f3Match-

Node

amd epyc_7003_firmwareRange<milanpi_1.0.0.6

AND

amd epyc_7003Match-

Node

amd epyc_7002_firmwareRange<romepi_1.0.0.d

AND

amd epyc_7002Match-

Node

amd epyc_7232p_firmwareRange<romepi_1.0.0.d

AND

amd epyc_7232pMatch-

Node

amd epyc_7252_firmwareRange<romepi_1.0.0.d

AND

amd epyc_7252Match-

Node

amd epyc_7262_firmwareRange<romepi_1.0.0.d

AND

amd epyc_7262Match-

Node

amd epyc_7272_firmwareRange<romepi_1.0.0.d

AND

amd epyc_7272Match-

Node

amd epyc_7282_firmwareRange<romepi_1.0.0.d

AND

amd epyc_7282Match-

Node

amd epyc_7302_firmwareRange<romepi_1.0.0.d

AND

amd epyc_7302Match-

Node

amd epyc_7302p_firmwareRange<romepi_1.0.0.d

AND

amd epyc_7302pMatch-

Node

amd epyc_7352_firmwareRange<romepi_1.0.0.d

AND

amd epyc_7352Match-

Node

amd epyc_7402_firmwareRange<romepi_1.0.0.d

AND

amd epyc_7402Match-

Node

amd epyc_7402p_firmwareRange<romepi_1.0.0.d

AND

amd epyc_7402pMatch-

Node

amd epyc_7452_firmwareRange<romepi_1.0.0.d

AND

amd epyc_7452Match-

Node

amd epyc_7502_firmwareRange<romepi_1.0.0.d

AND

amd epyc_7502Match-

Node

amd epyc_7502p_firmwareRange<romepi_1.0.0.d

AND

amd epyc_7502pMatch-

Node

amd epyc_7532_firmwareRange<romepi_1.0.0.d

AND

amd epyc_7532Match-

Node

amd epyc_7542_firmwareRange<romepi_1.0.0.d

AND

amd epyc_7542Match-

Node

amd epyc_7552_firmwareRange<romepi_1.0.0.d

AND

amd epyc_7552Match-

Node

amd epyc_7642_firmwareRange<romepi_1.0.0.d

AND

amd epyc_7642Match-

Node

amd epyc_7662_firmwareRange<romepi_1.0.0.d

AND

amd epyc_7662Match-

Node

amd epyc_7702_firmwareRange<romepi_1.0.0.d

AND

amd epyc_7702Match-

Node

amd epyc_7702p_firmwareRange<romepi_1.0.0.d

AND

amd epyc_7702pMatch-

Node

amd epyc_7742_firmwareRange<romepi_1.0.0.d

AND

amd epyc_7742Match-

Node

amd epyc_7f32_firmwareRange<romepi_1.0.0.d

AND

amd epyc_7f32Match-

Node

amd epyc_7f52_firmwareRange<romepi_1.0.0.d

AND

amd epyc_7f52Match-

Node

amd epyc_7f72_firmwareRange<romepi_1.0.0.d

AND

amd epyc_7f72Match-

Node

amd epyc_7h12_firmwareRange<romepi_1.0.0.d

AND

amd epyc_7h12Match-

Node

amd epyc_7001_firmwareRange<naplespi_1.0.0.h

AND

amd epyc_7001Match-

Node

amd epyc_7251_firmwareRange<naplespi_1.0.0.h

AND

amd epyc_7251Match-

Node

amd epyc_7261_firmwareRange<naplespi_1.0.0.h

AND

amd epyc_7261Match-

Node

amd epyc_7281_firmwareRange<naplespi_1.0.0.h

AND

amd epyc_7281Match-

Node

amd epyc_7301_firmwareRange<naplespi_1.0.0.h

AND

amd epyc_7301Match-

Node

amd epyc_7351_firmwareRange<naplespi_1.0.0.h

AND

amd epyc_7351Match-

Node

amd epyc_7351p_firmwareRange<naplespi_1.0.0.h

AND

amd epyc_7351pMatch-

Node

amd epyc_7371_firmwareRange<naplespi_1.0.0.h

AND

amd epyc_7371Match-

Node

amd epyc_7401_firmwareRange<naplespi_1.0.0.h

AND

amd epyc_7401Match-

Node

amd epyc_7401p_firmwareRange<naplespi_1.0.0.h

AND

amd epyc_7401pMatch-

Node

amd epyc_7451_firmwareRange<naplespi_1.0.0.h

AND

amd epyc_7451Match-

Node

amd epyc_7501_firmwareRange<naplespi_1.0.0.h

AND

amd epyc_7501Match-

Node

amd epyc_7551_firmwareRange<naplespi_1.0.0.h

AND

amd epyc_7551Match-

Node

amd epyc_7551p_firmwareRange<naplespi_1.0.0.h

AND

amd epyc_7551pMatch-

Node

amd epyc_7601_firmwareRange<naplespi_1.0.0.h

AND

amd epyc_7601Match-

Node

amd ryzen_5_2400g_firmwareMatch-

AND

amd ryzen_5_2400gMatch-

Node

amd ryzen_5_2400ge_firmwareMatch-

AND

amd ryzen_5_2400geMatch-

Node

amd ryzen_3_2200g_firmwareMatch-

AND

amd ryzen_3_2200gMatch-

Node

amd ryzen_3_2200ge_firmwareMatch-

AND

amd ryzen_3_2200geMatch-

Node

amd ryzen_3_pro_2100ge_firmwareMatch-

AND

amd ryzen_3_pro_2100geMatch-

Node

amd ryzen_9_3950x_firmwareMatch-

AND

amd ryzen_9_3950xMatch-

Node

amd ryzen_9_3900xt_firmwareMatch-

AND

amd ryzen_9_3900xtMatch-

Node

amd ryzen_9_3900x_firmwareMatch-

AND

amd ryzen_9_3900xMatch-

Node

amd ryzen_9_3900_firmwareMatch-

AND

amd ryzen_9_3900Match-

Node

amd ryzen_7_3800xt_firmwareMatch-

AND

amd ryzen_7_3800xtMatch-

Node

amd ryzen_7_3800x_firmwareMatch-

AND

amd ryzen_7_3800xMatch-

Node

amd ryzen_7_3700x_firmwareMatch-

AND

amd ryzen_7_3700xMatch-

Node

amd ryzen_5_3600xt_firmwareMatch-

AND

amd ryzen_5_3600xtMatch-

Node

amd ryzen_5_3600x_firmwareMatch-

AND

amd ryzen_5_3600xMatch-

Node

amd ryzen_5_3600_firmwareMatch-

AND

amd ryzen_5_3600Match-

Node

amd ryzen_5_3500x_firmwareMatch-

AND

amd ryzen_5_3500xMatch-

Node

amd ryzen_5_3500_firmwareMatch-

AND

amd ryzen_5_3500Match-

Node

amd ryzen_3_3300x_firmwareMatch-

AND

amd ryzen_3_3300xMatch-

Node

amd ryzen_3_3100_firmwareMatch-

AND

amd ryzen_3_3100Match-

Node

amd ryzen_9_5950x_firmwareMatch-

AND

amd ryzen_9_5950xMatch-

Node

amd ryzen_9_5900x_firmwareMatch-

AND

amd ryzen_9_5900xMatch-

Node

amd ryzen_9_5900_firmwareMatch-

AND

amd ryzen_9_5900Match-

Node

amd ryzen_7_5800x3d_firmwareMatch-

AND

amd ryzen_7_5800x3dMatch-

Node

amd ryzen_7_5800x_firmwareMatch-

AND

amd ryzen_7_5800xMatch-

Node

amd ryzen_7_5800_firmwareMatch-

AND

amd ryzen_7_5800Match-

Node

amd ryzen_7_5700x_firmwareMatch-

AND

amd ryzen_7_5700xMatch-

Node

amd ryzen_5_5600x_firmwareMatch-

AND

amd ryzen_5_5600xMatch-

Node

amd ryzen_5_5600_firmwareMatch-

AND

amd ryzen_5_5600Match-

Node

amd ryzen_5_5500_firmwareMatch-

AND

amd ryzen_5_5500Match-

Node

amd ryzen_threadripper_pro_3945wx_firmwareMatch-

AND

amd ryzen_threadripper_pro_3945wxMatch-

Node

amd ryzen_threadripper_pro_3955wx_firmwareMatch-

AND

amd ryzen_threadripper_pro_3955wxMatch-

Node

amd ryzen_threadripper_pro_3975wx_firmwareMatch-

AND

amd ryzen_threadripper_pro_3975wxMatch-

Node

amd ryzen_threadripper_pro_3995wx_firmwareMatch-

AND

amd ryzen_threadripper_pro_3995wxMatch-

Node

amd ryzen_threadripper_3960x_firmwareMatch-

AND

amd ryzen_threadripper_3960xMatch-

Node

amd ryzen_threadripper_3970x_firmwareMatch-

AND

amd ryzen_threadripper_3970xMatch-

Node

amd ryzen_threadripper_3990x_firmwareMatch-

AND

amd ryzen_threadripper_3990xMatch-

Node

amd ryzen_threadripper_pro_5945wx_firmwareMatch-

AND

amd ryzen_threadripper_pro_5945wxMatch-

Node

amd ryzen_threadripper_pro_5955wx_firmwareMatch-

AND

amd ryzen_threadripper_pro_5955wxMatch-

Node

amd ryzen_threadripper_pro_5965wx_firmwareMatch-

AND

amd ryzen_threadripper_pro_5965wxMatch-

Node

amd ryzen_threadripper_pro_5975wx_firmwareMatch-

AND

amd ryzen_threadripper_pro_5975wxMatch-

Node

amd ryzen_threadripper_pro_5995wx_firmwareMatch-

AND

amd ryzen_threadripper_pro_5995wxMatch-

Node

amd ryzen_3_3250u_firmwareRange<picassopi-fp5_1.0.0.d

AND

amd ryzen_3_3250uMatch-

Node

amd ryzen_3_3250c_firmwareRange<picassopi-fp5_1.0.0.d

AND

amd ryzen_3_3250cMatch-

Node

amd ryzen_3_3200u_firmwareRange<picassopi-fp5_1.0.0.d

AND

amd ryzen_3_3200uMatch-

Node

amd amd_3015ce_firmwareRange<pollockpi-ft5_1.0.0.3

AND

amd amd_3015ceMatch-

Node

amd amd_3015e_firmwareRange<pollockpi-ft5_1.0.0.3

AND

amd amd_3015eMatch-

Node

amd ryzen_7_2800h_firmwareMatch-

AND

amd ryzen_7_2800hMatch-

Node

amd ryzen_7_2700u_firmwareMatch-

AND

amd ryzen_7_2700uMatch-

Node

amd ryzen_5_2600h_firmwareMatch-

AND

amd ryzen_5_2600hMatch-

Node

amd ryzen_5_2500u_firmwareMatch-

AND

amd ryzen_5_2500uMatch-

Node

amd ryzen_3_2300u_firmwareMatch-

AND

amd ryzen_3_2300uMatch-

Node

amd ryzen_3_2200u_firmwareMatch-

AND

amd ryzen_3_2200uMatch-

Node

amd ryzen_7_3780u_firmwareMatch-

AND

amd ryzen_7_3780uMatch-

Node

amd ryzen_7_3750h_firmwareMatch-

AND

amd ryzen_7_3750hMatch-

Node

amd ryzen_7_3700c_firmwareMatch-

AND

amd ryzen_7_3700cMatch-

Node

amd ryzen_7_3700u_firmwareMatch-

AND

amd ryzen_7_3700uMatch-

Node

amd ryzen_5_3580u_firmwareMatch-

AND

amd ryzen_5_3580uMatch-

Node

amd ryzen_5_3550h_firmwareMatch-

AND

amd ryzen_5_3550hMatch-

Node

amd ryzen_5_3500c_firmwareMatch-

AND

amd ryzen_5_3500cMatch-

Node

amd ryzen_5_3500u_firmwareMatch-

AND

amd ryzen_5_3500uMatch-

Node

amd ryzen_5_3450u_firmwareMatch-

AND

amd ryzen_5_3450uMatch-

Node

amd ryzen_3_3350u_firmwareMatch-

AND

amd ryzen_3_3350uMatch-

Node

amd ryzen_3_3300u_firmwareMatch-

AND

amd ryzen_3_3300uMatch-

[
  {
    "defaultStatus": "unaffected",
    "packageName": "AGESA",
    "platforms": [
      "x86"
    ],
    "product": "Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various "
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "packageName": "AGESA",
    "platforms": [
      "x86"
    ],
    "product": "Ryzen™ 3000 Series Desktop Processors “Matisse” AM4",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various "
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "packageName": "AGESA",
    "platforms": [
      "x86"
    ],
    "product": "AMD Ryzen™ 5000 Series Desktop Processors “Vermeer” AM4",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various "
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "packageName": "AGESA",
    "platforms": [
      "x86"
    ],
    "product": "3rd Gen AMD Ryzen™ Threadripper™ Processors “Castle Peak” HEDT",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "packageName": "AGESA",
    "platforms": [
      "x86"
    ],
    "product": "Ryzen™ Threadripper™ PRO Processors “Castle Peak” WS",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various "
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "packageName": "AGESA",
    "platforms": [
      "x86"
    ],
    "product": "Ryzen™ Threadripper™ PRO Processors “Chagall” WS",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various "
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "packageName": "AGESA",
    "platforms": [
      "x86"
    ],
    "product": "Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Dali”/”Dali” ULP",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various "
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "packageName": "AGESA",
    "platforms": [
      "x86"
    ],
    "product": "Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics   “Pollock”",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various "
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "packageName": "AGESA",
    "platforms": [
      "x86"
    ],
    "product": "Ryzen™ 2000 Series Mobile Processors “Raven Ridge” FP5",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various "
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "packageName": "AGESA",
    "platforms": [
      "x86"
    ],
    "product": "Ryzen™ 3000 Series Mobile processor, 2nd Gen AMD Ryzen™ Mobile Processors with Radeon™ Graphics “Picasso”",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various "
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "packageName": "AGESA",
    "platforms": [
      "x86"
    ],
    "product": "1st Gen AMD EPYC™ Processors",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various "
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "packageName": "AGESA",
    "platforms": [
      "x86"
    ],
    "product": "2nd Gen AMD EPYC™ Processors",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various "
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "packageName": "AGESA",
    "platforms": [
      "x86"
    ],
    "product": "3rd Gen AMD EPYC™ Processors",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various "
      }
    ]
  }
]

Source	Link
amd	www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3001
amd	www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4001

28 Jan 2025 16:15Current

7.1High risk

Vulners AI Score7.1

CVSS 3.15.5

EPSS0.00129

SSVC