Lucene search

K
cve[email protected]CVE-2021-46773
HistoryMay 09, 2023 - 8:15 p.m.

CVE-2021-46773

2023-05-0920:15:12
CWE-20
web.nvd.nist.gov
15
cve-2021-46773
input validation
abl
privileged attacker
asp memory
integrity
code execution

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

8.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

39.5%

Insufficient input validation in ABL may enable
a privileged attacker to corrupt ASP memory, potentially resulting in a loss of
integrity or code execution.

Affected configurations

NVD
Node
amdryzen_6600h_firmwareMatchrembrandtpi-fp7_1.0.0.5
AND
amdryzen_6600hMatch-
Node
amdryzen_6600hs_firmwareMatchrembrandtpi-fp7_1.0.0.5
AND
amdryzen_6600hsMatch-
Node
amdryzen_6600u_firmwareMatchrembrandtpi-fp7_1.0.0.5
AND
amdryzen_6600uMatch-
Node
amdryzen_6800h_firmwareMatchrembrandtpi-fp7_1.0.0.5
AND
amdryzen_6800hMatch-
Node
amdryzen_6800hs_firmwareMatchrembrandtpi-fp7_1.0.0.5
AND
amdryzen_6800hsMatch-
Node
amdryzen_6800u_firmwareMatchrembrandtpi-fp7_1.0.0.5
AND
amdryzen_6800uMatch-
Node
amdryzen_6900hs_firmwareMatchrembrandtpi-fp7_1.0.0.5
AND
amdryzen_6900hsMatch-
Node
amdryzen_6900hx_firmwareMatchrembrandtpi-fp7_1.0.0.5
AND
amdryzen_6900hxMatch-
Node
amdryzen_6980hs_firmwareMatchrembrandtpi-fp7_1.0.0.5
AND
amdryzen_6980hsMatch-
Node
amdryzen_6980hx_firmwareMatchrembrandtpi-fp7_1.0.0.5
AND
amdryzen_6980hxMatch-
Node
amdryzen_5300g_firmwareMatchcezannepi-fp6_1.0.0.b
AND
amdryzen_5300gMatch-
Node
amdryzen_5300ge_firmwareMatchcezannepi-fp6_1.0.0.b
AND
amdryzen_5300geMatch-
Node
amdryzen_5500_firmwareMatchcezannepi-fp6_1.0.0.b
AND
amdryzen_5500Match-
Node
amdryzen_5600_firmwareMatchcezannepi-fp6_1.0.0.b
AND
amdryzen_5600Match-
Node
amdryzen_5600g_firmwareMatchcezannepi-fp6_1.0.0.b
AND
amdryzen_5600gMatch-
Node
amdryzen_5600ge_firmwareMatchcezannepi-fp6_1.0.0.b
AND
amdryzen_5600geMatch-
Node
amdryzen_5600x_firmwareMatchcezannepi-fp6_1.0.0.b
AND
amdryzen_5600xMatch-
Node
amdryzen_5700g_firmwareMatchcezannepi-fp6_1.0.0.b
AND
amdryzen_5700gMatch-
Node
amdryzen_5700ge_firmwareMatchcezannepi-fp6_1.0.0.b
AND
amdryzen_5700geMatch-
Node
amdryzen_5700x_firmwareMatchcezannepi-fp6_1.0.0.b
AND
amdryzen_5700xMatch-
Node
amdryzen_5800_firmwareMatchcezannepi-fp6_1.0.0.b
AND
amdryzen_5800Match-
Node
amdryzen_5800x3d_firmwareMatchcezannepi-fp6_1.0.0.b
AND
amdryzen_5800x3dMatch-
Node
amdryzen_5800x_firmwareMatchcezannepi-fp6_1.0.0.b
AND
amdryzen_5800xMatch-
Node
amdryzen_5900_firmwareMatchcezannepi-fp6_1.0.0.b
AND
amdryzen_5900Match-
Node
amdryzen_5900x_firmwareMatchcezannepi-fp6_1.0.0.b
AND
amdryzen_5900xMatch-
Node
amdryzen_5945wx_firmwareMatchcezannepi-fp6_1.0.0.b
AND
amdryzen_5945wxMatch-
Node
amdryzen_5950x_firmwareMatchcezannepi-fp6_1.0.0.b
AND
amdryzen_5950xMatch-
Node
amdryzen_5955wx_firmwareMatchcezannepi-fp6_1.0.0.b
AND
amdryzen_5955wxMatch-
Node
amdryzen_5965wx_firmwareMatchcezannepi-fp6_1.0.0.b
AND
amdryzen_5965wxMatch-
Node
amdryzen_5975wx_firmwareMatchcezannepi-fp6_1.0.0.b
AND
amdryzen_5975wxMatch-
Node
amdryzen_5995wx_firmwareMatchcezannepi-fp6_1.0.0.b
AND
amdryzen_5995wxMatch-
Node
amdryzen_3100_firmwareMatchcomboam4pi_1.0.0.8
AND
amdryzen_3100Match-
Node
amdryzen_3100_firmwareMatchcomboam4v2_pi_1.2.0.6
AND
amdryzen_3100Match-
Node
amdryzen_3100_firmwareMatchrenoirpi-fp6_1.0.0.8
AND
amdryzen_3100Match-
Node
amdryzen_3300x_firmwareMatchcomboam4pi_1.0.0.8
AND
amdryzen_3300xMatch-
Node
amdryzen_3300x_firmwareMatchcomboam4v2_pi_1.2.0.6
AND
amdryzen_3300xMatch-
Node
amdryzen_3300x_firmwareMatchrenoirpi-fp6_1.0.0.8
AND
amdryzen_3300xMatch-
Node
amdryzen_3500_firmwareMatchcomboam4pi_1.0.0.8
AND
amdryzen_3500Match-
Node
amdryzen_3500_firmwareMatchcomboam4v2_pi_1.2.0.6
AND
amdryzen_3500Match-
Node
amdryzen_3500_firmwareMatchrenoirpi-fp6_1.0.0.8
AND
amdryzen_3500Match-
Node
amdryzen_3500x_firmwareMatchcomboam4pi_1.0.0.8
AND
amdryzen_3500xMatch-
Node
amdryzen_3500x_firmwareMatchcomboam4v2_pi_1.2.0.6
AND
amdryzen_3500xMatch-
Node
amdryzen_3500x_firmwareMatchrenoirpi-fp6_1.0.0.8
AND
amdryzen_3500xMatch-
Node
amdryzen_3600_firmwareMatchcomboam4pi_1.0.0.8
AND
amdryzen_3600Match-
Node
amdryzen_3600_firmwareMatchcomboam4v2_pi_1.2.0.6
AND
amdryzen_3600Match-
Node
amdryzen_3600_firmwareMatchrenoirpi-fp6_1.0.0.8
AND
amdryzen_3600Match-
Node
amdryzen_3600x_firmwareMatchcomboam4pi_1.0.0.8
AND
amdryzen_3600xMatch-
Node
amdryzen_3600x_firmwareMatchcomboam4v2_pi_1.2.0.6
AND
amdryzen_3600xMatch-
Node
amdryzen_3600x_firmwareMatchrenoirpi-fp6_1.0.0.8
AND
amdryzen_3600xMatch-
Node
amdryzen_3600xt_firmwareMatchcomboam4pi_1.0.0.8
AND
amdryzen_3600xtMatch-
Node
amdryzen_3600xt_firmwareMatchcomboam4v2_pi_1.2.0.6
AND
amdryzen_3600xtMatch-
Node
amdryzen_3600xt_firmwareMatchrenoirpi-fp6_1.0.0.8
AND
amdryzen_3600xtMatch-
Node
amdryzen_3800x_firmwareMatchcomboam4pi_1.0.0.8
AND
amdryzen_3800xMatch-
Node
amdryzen_3800x_firmwareMatchcomboam4v2_pi_1.2.0.6
AND
amdryzen_3800xMatch-
Node
amdryzen_3800x_firmwareMatchrenoirpi-fp6_1.0.0.8
AND
amdryzen_3800xMatch-
Node
amdryzen_3800xt_firmwareMatchcomboam4pi_1.0.0.8
AND
amdryzen_3800xtMatch-
Node
amdryzen_3800xt_firmwareMatchcomboam4v2_pi_1.2.0.6
AND
amdryzen_3800xtMatch-
Node
amdryzen_3800xt_firmwareMatchrenoirpi-fp6_1.0.0.8
AND
amdryzen_3800xtMatch-
Node
amdryzen_3900_firmwareMatchcomboam4pi_1.0.0.8
AND
amdryzen_3900Match-
Node
amdryzen_3900_firmwareMatchcomboam4v2_pi_1.2.0.6
AND
amdryzen_3900Match-
Node
amdryzen_3900_firmwareMatchrenoirpi-fp6_1.0.0.8
AND
amdryzen_3900Match-
Node
amdryzen_3900x_firmwareMatchcomboam4pi_1.0.0.8
AND
amdryzen_3900xMatch-
Node
amdryzen_3900x_firmwareMatchcomboam4v2_pi_1.2.0.6
AND
amdryzen_3900xMatch-
Node
amdryzen_3900x_firmwareMatchrenoirpi-fp6_1.0.0.8
AND
amdryzen_3900xMatch-
Node
amdryzen_3900xt_firmwareMatchcomboam4pi_1.0.0.8
AND
amdryzen_3900xtMatch-
Node
amdryzen_3900xt_firmwareMatchcomboam4v2_pi_1.2.0.6
AND
amdryzen_3900xtMatch-
Node
amdryzen_3900xt_firmwareMatchrenoirpi-fp6_1.0.0.8
AND
amdryzen_3900xtMatch-
Node
amdryzen_3950x_firmwareMatchcomboam4pi_1.0.0.8
AND
amdryzen_3950xMatch-
Node
amdryzen_3950x_firmwareMatchcomboam4v2_pi_1.2.0.6
AND
amdryzen_3950xMatch-
Node
amdryzen_3950x_firmwareMatchrenoirpi-fp6_1.0.0.8
AND
amdryzen_3950xMatch-
Node
amdryzen_1200_\(af\)_firmwareMatchpinnaclepi-am4_1.0.0.c
AND
amdryzen_1200_\(af\)Match-
Node
amdryzen_1200_\(af\)_firmwareMatchraven-fp5-am4_1.1.0.e
AND
amdryzen_1200_\(af\)Match-
Node
amdryzen_1600_\(af\)_firmwareMatchpinnaclepi-am4_1.0.0.c
AND
amdryzen_1600_\(af\)Match-
Node
amdryzen_1600_\(af\)_firmwareMatchraven-fp5-am4_1.1.0.e
AND
amdryzen_1600_\(af\)Match-
Node
amdryzen_2200g_firmwareMatchpinnaclepi-am4_1.0.0.c
AND
amdryzen_2200gMatch-
Node
amdryzen_2200g_firmwareMatchraven-fp5-am4_1.1.0.e
AND
amdryzen_2200gMatch-
Node
amdryzen_2200ge_firmwareMatchpinnaclepi-am4_1.0.0.c
AND
amdryzen_2200geMatch-
Node
amdryzen_2200ge_firmwareMatchraven-fp5-am4_1.1.0.e
AND
amdryzen_2200geMatch-
Node
amdryzen_2300x_firmwareMatchpinnaclepi-am4_1.0.0.c
AND
amdryzen_2300xMatch-
Node
amdryzen_2300x_firmwareMatchraven-fp5-am4_1.1.0.e
AND
amdryzen_2300xMatch-
Node
amdryzen_2400g_firmwareMatchpinnaclepi-am4_1.0.0.c
AND
amdryzen_2400gMatch-
Node
amdryzen_2400g_firmwareMatchraven-fp5-am4_1.1.0.e
AND
amdryzen_2400gMatch-
Node
amdryzen_2400ge_firmwareMatchpinnaclepi-am4_1.0.0.c
AND
amdryzen_2400geMatch-
Node
amdryzen_2400ge_firmwareMatchraven-fp5-am4_1.1.0.e
AND
amdryzen_2400geMatch-
Node
amdryzen_2500x_firmwareMatchpinnaclepi-am4_1.0.0.c
AND
amdryzen_2500xMatch-
Node
amdryzen_2500x_firmwareMatchraven-fp5-am4_1.1.0.e
AND
amdryzen_2500xMatch-
Node
amdryzen_2600_firmwareMatchpinnaclepi-am4_1.0.0.c
AND
amdryzen_2600Match-
Node
amdryzen_2600_firmwareMatchraven-fp5-am4_1.1.0.e
AND
amdryzen_2600Match-
Node
amdryzen_2600e_firmwareMatchpinnaclepi-am4_1.0.0.c
AND
amdryzen_2600eMatch-
Node
amdryzen_2600e_firmwareMatchraven-fp5-am4_1.1.0.e
AND
amdryzen_2600eMatch-
Node
amdryzen_2600x_firmwareMatchpinnaclepi-am4_1.0.0.c
AND
amdryzen_2600xMatch-
Node
amdryzen_2600x_firmwareMatchraven-fp5-am4_1.1.0.e
AND
amdryzen_2600xMatch-
Node
amdryzen_2700_firmwareMatchpinnaclepi-am4_1.0.0.c
AND
amdryzen_2700Match-
Node
amdryzen_2700_firmwareMatchraven-fp5-am4_1.1.0.e
AND
amdryzen_2700Match-
Node
amdryzen_2700e_firmwareMatchpinnaclepi-am4_1.0.0.c
AND
amdryzen_2700eMatch-
Node
amdryzen_2700e_firmwareMatchraven-fp5-am4_1.1.0.e
AND
amdryzen_2700eMatch-
Node
amdryzen_2700x_firmwareMatchpinnaclepi-am4_1.0.0.c
AND
amdryzen_2700xMatch-
Node
amdryzen_2700x_firmwareMatchraven-fp5-am4_1.1.0.e
AND
amdryzen_2700xMatch-
Node
amdryzen_2920x_firmwareMatchpinnaclepi-am4_1.0.0.c
AND
amdryzen_2920xMatch-
Node
amdryzen_2920x_firmwareMatchraven-fp5-am4_1.1.0.e
AND
amdryzen_2920xMatch-
Node
amdryzen_2950x_firmwareMatchpinnaclepi-am4_1.0.0.c
AND
amdryzen_2950xMatch-
Node
amdryzen_2950x_firmwareMatchraven-fp5-am4_1.1.0.e
AND
amdryzen_2950xMatch-
Node
amdryzen_2970wx_firmwareMatchpinnaclepi-am4_1.0.0.c
AND
amdryzen_2970wxMatch-
Node
amdryzen_2970wx_firmwareMatchraven-fp5-am4_1.1.0.e
AND
amdryzen_2970wxMatch-
Node
amdryzen_2990wx_firmwareMatchpinnaclepi-am4_1.0.0.c
AND
amdryzen_2990wxMatch-
Node
amdryzen_2990wx_firmwareMatchraven-fp5-am4_1.1.0.e
AND
amdryzen_2990wxMatch-
Node
amdryzen_pro_2100ge_firmwareMatchpinnaclepi-am4_1.0.0.c
AND
amdryzen_pro_2100geMatch-
Node
amdryzen_pro_2100ge_firmwareMatchraven-fp5-am4_1.1.0.e
AND
amdryzen_pro_2100geMatch-

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "packageName": "AGESA",
    "platforms": [
      "x86"
    ],
    "product": "Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various "
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "packageName": "AGESA",
    "platforms": [
      "x86"
    ],
    "product": "Ryzen™ 2000 Series Desktop Processors “Pinnacle Ridge”",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various "
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "packageName": "AGESA",
    "platforms": [
      "x86"
    ],
    "product": "Ryzen™ 3000 Series Desktop Processors “Matisse” AM4",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various "
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "packageName": "AGESA",
    "platforms": [
      "x86"
    ],
    "product": "AMD Ryzen™ 5000 Series Desktop Processors “Vermeer” AM4",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various "
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "packageName": "AGESA",
    "platforms": [
      "x86"
    ],
    "product": "Ryzen™ 5000 Series Desktop processor with Radeon™ Graphics  “Cezanne” AM4",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "Various "
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "packageName": "AGESA",
    "platforms": [
      "x86"
    ],
    "product": "3rd Gen AMD Ryzen™ Threadripper™ Processors “Castle Peak” HEDT",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "packageName": "AGESA",
    "platforms": [
      "x86"
    ],
    "product": "Ryzen™ Threadripper™ PRO Processors “Castle Peak” WS",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various "
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "packageName": "AGESA",
    "platforms": [
      "x86"
    ],
    "product": "Ryzen™ Threadripper™ PRO Processors “Chagall” WS",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various "
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "packageName": "AGESA",
    "platforms": [
      "x86"
    ],
    "product": "Ryzen™ 2000 Series Mobile Processors “Raven Ridge” FP5",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various "
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "packageName": "AGESA",
    "platforms": [
      "x86"
    ],
    "product": "Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics “Renoir” ",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various "
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "packageName": "AGESA",
    "platforms": [
      "x86"
    ],
    "product": "Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Lucienne”",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various "
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "packageName": "AGESA",
    "platforms": [
      "x86"
    ],
    "product": "Ryzen™ 5000 Series Mobile processors with Radeon™ Graphics “Cezanne”",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various "
      }
    ]
  }
]

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

8.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

39.5%

Related for CVE-2021-46773