Lucene search

[email protected]CVE-2021-46755

HistoryMay 09, 2023 - 8:15 p.m.

CVE-2021-46755

2023-05-0920:15:00

NVD-CWE-noinfo

[email protected]

web.nvd.nist.gov

cve-2021-46755

syshub

asp bootloader

denial of service

nvd

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

8.4 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.001 Low

EPSS

Percentile

33.7%

JSON

Failure to unmap certain SysHub mappings in
error paths of the ASP (AMD Secure Processor) bootloader may allow an attacker
with a malicious bootloader to exhaust the SysHub resources resulting in a
potential denial of service.

CPENameOperatorVersion
amd:ryzen_5500_firmwareamd ryzen 5500 firmwareeqcomboam4_v2_pi_1.2.0.8
amd:ryzen_5500_firmwareamd ryzen 5500 firmwareeqcomboam4v2_pi_1.2.0.6
amd:ryzen_5600_firmwareamd ryzen 5600 firmwareeqcomboam4_v2_pi_1.2.0.8
amd:ryzen_5600_firmwareamd ryzen 5600 firmwareeqcomboam4v2_pi_1.2.0.6
amd:ryzen_5600g_firmwareamd ryzen 5600g firmwareeqcomboam4_v2_pi_1.2.0.8
amd:ryzen_5600g_firmwareamd ryzen 5600g firmwareeqcomboam4v2_pi_1.2.0.6
amd:ryzen_5600x_firmwareamd ryzen 5600x firmwareeqcomboam4_v2_pi_1.2.0.8
amd:ryzen_5600x_firmwareamd ryzen 5600x firmwareeqcomboam4v2_pi_1.2.0.6
amd:ryzen_5700g_firmwareamd ryzen 5700g firmwareeqcomboam4_v2_pi_1.2.0.8
amd:ryzen_5700g_firmwareamd ryzen 5700g firmwareeqcomboam4v2_pi_1.2.0.6

CPE	Name	Operator	Version
amd:ryzen_5500_firmware	amd ryzen 5500 firmware	eq	comboam4_v2_pi_1.2.0.8
amd:ryzen_5500_firmware	amd ryzen 5500 firmware	eq	comboam4v2_pi_1.2.0.6
amd:ryzen_5600_firmware	amd ryzen 5600 firmware	eq	comboam4_v2_pi_1.2.0.8
amd:ryzen_5600_firmware	amd ryzen 5600 firmware	eq	comboam4v2_pi_1.2.0.6
amd:ryzen_5600g_firmware	amd ryzen 5600g firmware	eq	comboam4_v2_pi_1.2.0.8
amd:ryzen_5600g_firmware	amd ryzen 5600g firmware	eq	comboam4v2_pi_1.2.0.6
amd:ryzen_5600x_firmware	amd ryzen 5600x firmware	eq	comboam4_v2_pi_1.2.0.8
amd:ryzen_5600x_firmware	amd ryzen 5600x firmware	eq	comboam4v2_pi_1.2.0.6
amd:ryzen_5700g_firmware	amd ryzen 5700g firmware	eq	comboam4_v2_pi_1.2.0.8
amd:ryzen_5700g_firmware	amd ryzen 5700g firmware	eq	comboam4v2_pi_1.2.0.6

Rows per page:

1-10 of 461

References

www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4001

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

8.4 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.001 Low

EPSS

Percentile

33.7%

JSON

Related for CVE-2021-46755

prion1 cvelist1 amd2 hp1