CVE-2021-46766

🗓️ 14 Nov 2023 18:51:58Reported by AMDType

Improper clearing of sensitive data in the ASP Bootloader may expose secret keys to a privileged attacker accessing ASP SRAM, potentially leading to a loss of confidentiality

Reporter	Title	Published	Views	Family All 31
Amd	AMD Server Vulnerabilities – Nov 2023	14 Nov 202300:00	–	amd
Amd	AMD Client Vulnerabilities – November 2023	14 Nov 202300:00	–	amd
Amd	AMD Embedded Processors Vulnerabilities – February 2024	13 Feb 202400:00	–	amd
CNNVD	AMD EPYC Security Vulnerability	14 Nov 202300:00	–	cnnvd
Cvelist	CVE-2021-46766	14 Nov 202318:51	–	cvelist
EUVD	EUVD-2021-33422	3 Oct 202520:07	–	euvd
NVD	CVE-2021-46766	14 Nov 202319:15	–	nvd
OpenVAS	SUSE: Security Advisory (SUSE-SU-2023:4654-1)	7 Dec 202300:00	–	openvas
OpenVAS	SUSE: Security Advisory (SUSE-SU-2023:4655-1)	7 Dec 202300:00	–	openvas
OpenVAS	SUSE: Security Advisory (SUSE-SU-2023:4665-1)	7 Dec 202300:00	–	openvas

NVD

Node

amd epyc_9654p_firmwareRange<genoapi_1.0.0.4

AND

amd epyc_9654pMatch-

Node

amd epyc_9654_firmwareRange<genoapi_1.0.0.4

AND

amd epyc_9654Match-

Node

amd epyc_9634_firmwareRange<genoapi_1.0.0.4

AND

amd epyc_9634Match-

Node

amd epyc_9554p_firmwareRange<genoapi_1.0.0.4

AND

amd epyc_9554pMatch-

Node

amd epyc_9554_firmwareRange<genoapi_1.0.0.4

AND

amd epyc_9554Match-

Node

amd epyc_9534_firmwareRange<genoapi_1.0.0.4

AND

amd epyc_9534Match-

Node

amd epyc_9474f_firmwareRange<genoapi_1.0.0.4

AND

amd epyc_9474fMatch-

Node

amd epyc_9454p_firmwareRange<genoapi_1.0.0.4

AND

amd epyc_9454pMatch-

Node

amd epyc_9454_firmwareRange<genoapi_1.0.0.4

AND

amd epyc_9454Match-

Node

amd epyc_9374f_firmwareRange<genoapi_1.0.0.4

AND

amd epyc_9374fMatch-

Node

amd epyc_9354p_firmwareRange<genoapi_1.0.0.4

AND

amd epyc_9354pMatch-

Node

amd epyc_9354_firmwareRange<genoapi_1.0.0.4

AND

amd epyc_9354Match-

Node

amd epyc_9334_firmwareRange<genoapi_1.0.0.4

AND

amd epyc_9334Match-

Node

amd epyc_9274f_firmwareRange<genoapi_1.0.0.4

AND

amd epyc_9274fMatch-

Node

amd epyc_9254_firmwareRange<genoapi_1.0.0.4

AND

amd epyc_9254Match-

Node

amd epyc_9224_firmwareRange<genoapi_1.0.0.4

AND

amd epyc_9224Match-

Node

amd epyc_9174f_firmwareRange<genoapi_1.0.0.4

AND

amd epyc_9174fMatch-

Node

amd epyc_9124_firmwareRange<genoapi_1.0.0.4

AND

amd epyc_9124Match-

Node

amd epyc_9684x_firmwareRange<genoapi_1.0.0.4

AND

amd epyc_9684xMatch-

Node

amd epyc_9384x_firmwareRange<genoapi_1.0.0.4

AND

amd epyc_9384xMatch-

Node

amd epyc_9184x_firmwareRange<genoapi_1.0.0.4

AND

amd epyc_9184xMatch-

Node

amd epyc_9754_firmwareRange<genoapi_1.0.0.4

AND

amd epyc_9754Match-

Node

amd epyc_9754s_firmwareRange<genoapi_1.0.0.4

AND

amd epyc_9754sMatch-

Node

amd epyc_9734_firmwareRange<genoapi_1.0.0.4

AND

amd epyc_9734Match-

Node

amd ryzen_threadripper_pro_3995wx_firmwareRange<chagallwspi-swrx8_1.0.0.5

AND

amd ryzen_threadripper_pro_3995wxMatch-

Node

amd ryzen_threadripper_pro_3975wx_firmwareRange<chagallwspi-swrx8_1.0.0.5

AND

amd ryzen_threadripper_pro_3975wxMatch-

Node

amd ryzen_threadripper_pro_3955wx_firmwareRange<chagallwspi-swrx8_1.0.0.5

AND

amd ryzen_threadripper_pro_3955wxMatch-

Node

amd ryzen_threadripper_pro_3945wx_firmwareRange<chagallwspi-swrx8_1.0.0.5

AND

amd ryzen_threadripper_pro_3945wxMatch-

[
  {
    "defaultStatus": "unaffected",
    "packageName": "PI",
    "platforms": [
      "x86"
    ],
    "product": "Ryzen™ Threadripper™ PRO 3000WX Series Processors  “Chagall” WS",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "packageName": "PI",
    "platforms": [
      "x86"
    ],
    "product": "4th Gen AMD EPYC™ Processors",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "AMD EPYC™ Embedded 9003",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various"
      }
    ]
  }
]

Source	Link
amd	www.amd.com/en/corporate/product-security/bulletin/AMD-SB-5001
amd	www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3002
amd	www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4002

21 Nov 2024 06:34Current

6.1Medium risk

Vulners AI Score6.1

CVSS 3.12.5 - 5.5

EPSS0.00033

CWE-459