Lucene search

[email protected]NVD:CVE-2021-26366

HistoryMay 12, 2022 - 6:16 p.m.

CVE-2021-26366

2022-05-1218:16:53

[email protected]

web.nvd.nist.gov

attacker privilege elevation

boot rom data read

system integrity loss

CVSS2

3.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:P/A:N

CVSS3

7.1

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

EPSS

Percentile

12.6%

JSON

An attacker, who gained elevated privileges via some other vulnerability, may be able to read data from Boot ROM resulting in a loss of system integrity.

Affected configurations

Nvd

Node

amdradeon_softwareMatch-

Node

amdathlon_3050ge_firmwareMatch-

AND

amdathlon_3050geMatch-

Node

amdathlon_3150g_firmwareMatch-

AND

amdathlon_3150gMatch-

Node

amdathlon_3150ge_firmwareMatch-

AND

amdathlon_3150geMatch-

Node

amdryzen_3_2200u_firmwareMatch-

AND

amdryzen_3_2200uMatch-

Node

amdryzen_3_2300u_firmwareMatch-

AND

amdryzen_3_2300uMatch-

Node

amdryzen_3_3100_firmwareMatch-

AND

amdryzen_3_3100Match-

Node

amdryzen_3_3300g_firmwareMatch-

AND

amdryzen_3_3300gMatch-

Node

amdryzen_3_3300x_firmwareMatch-

AND

amdryzen_3_3300xMatch-

Node

amdryzen_3_5125c_firmwareMatch-

AND

amdryzen_3_5125cMatch-

Node

amdryzen_3_5400u_firmwareMatch-

AND

amdryzen_3_5400uMatch-

Node

amdryzen_3_5425c_firmwareMatch-

AND

amdryzen_3_5425cMatch-

Node

amdryzen_3_5425u_firmwareMatch-

AND

amdryzen_3_5425uMatch-

Node

amdryzen_5_2500u_firmwareMatch-

AND

amdryzen_5_2500uMatch-

Node

amdryzen_5_2600_firmwareMatch-

AND

amdryzen_5_2600Match-

Node

amdryzen_5_2600h_firmwareMatch-

AND

amdryzen_5_2600hMatch-

Node

amdryzen_5_2600x_firmwareMatch-

AND

amdryzen_5_2600xMatch-

Node

amdryzen_5_3400g_firmwareMatch-

AND

amdryzen_5_3400gMatch-

Node

amdryzen_5_3450g_firmwareMatch-

AND

amdryzen_5_3450gMatch-

Node

amdryzen_5_3600_firmwareMatch-

AND

amdryzen_5_3600Match-

Node

amdryzen_5_3600x_firmwareMatch-

AND

amdryzen_5_3600xMatch-

Node

amdryzen_5_5560u_firmwareMatch-

AND

amdryzen_5_5560uMatch-

Node

amdryzen_5_5600h_firmwareMatch-

AND

amdryzen_5_5600hMatch-

Node

amdryzen_5_5600hs_firmwareMatch-

AND

amdryzen_5_5600hsMatch-

Node

amdryzen_5_5600u_firmwareMatch-

AND

amdryzen_5_5600uMatch-

Node

amdryzen_5_5600x_firmwareMatch-

AND

amdryzen_5_5600xMatch-

Node

amdryzen_5_5625c_firmwareMatch-

AND

amdryzen_5_5625cMatch-

Node

amdryzen_5_5625u_firmwareMatch-

AND

amdryzen_5_5625uMatch-

Node

amdryzen_5_5700g_firmwareMatch-

AND

amdryzen_5_5700gMatch-

Node

amdryzen_5_5700ge_firmwareMatch-

AND

amdryzen_5_5700geMatch-

Node

amdryzen_7_2700_firmwareMatch-

AND

amdryzen_7_2700Match-

Node

amdryzen_7_2700u_firmwareMatch-

AND

amdryzen_7_2700uMatch-

Node

amdryzen_7_2700x_firmwareMatch-

AND

amdryzen_7_2700xMatch-

Node

amdryzen_7_2800h_firmwareMatch-

AND

amdryzen_7_2800hMatch-

Node

amdryzen_7_3700x_firmwareMatch-

AND

amdryzen_7_3700xMatch-

Node

amdryzen_7_3800x_firmwareMatch-

AND

amdryzen_7_3800xMatch-

Node

amdryzen_7_5800h_firmwareMatch-

AND

amdryzen_7_5800hMatch-

Node

amdryzen_7_5800hs_firmwareMatch-

AND

amdryzen_7_5800hsMatch-

Node

amdryzen_7_5800u_firmwareMatch-

AND

amdryzen_7_5800uMatch-

Node

amdryzen_7_5825c_firmwareMatch-

AND

amdryzen_7_5825cMatch-

Node

amdryzen_7_5825u_firmwareMatch-

AND

amdryzen_7_5825uMatch-

Node

amdryzen_9_3900x_firmwareMatch-

AND

amdryzen_9_3900xMatch-

Node

amdryzen_9_3950x_firmwareMatch-

AND

amdryzen_9_3950xMatch-

Node

amdryzen_9_5900hs_firmwareMatch-

AND

amdryzen_9_5900hsMatch-

Node

amdryzen_9_5900hx_firmwareMatch-

AND

amdryzen_9_5900hxMatch-

Node

amdryzen_9_5980hs_firmwareMatch-

AND

amdryzen_9_5980hsMatch-

Node

amdryzen_9_5980hx_firmwareMatch-

AND

amdryzen_9_5980hxMatch-

Node

amdryzen_threadripper_2920x_firmwareMatch-

AND

amdryzen_threadripper_2920xMatch-

Node

amdryzen_threadripper_2950x_firmwareMatch-

AND

amdryzen_threadripper_2950xMatch-

Node

amdryzen_threadripper_2970wx_firmwareMatch-

AND

amdryzen_threadripper_2970wxMatch-

Node

amdryzen_threadripper_2990wx_firmwareMatch-

AND

amdryzen_threadripper_2990wxMatch-

Node

amdryzen_threadripper_3960x_firmwareMatch-

AND

amdryzen_threadripper_3960xMatch-

Node

amdryzen_threadripper_3970x_firmwareMatch-

AND

amdryzen_threadripper_3970xMatch-

Node

amdryzen_threadripper_3990x_firmwareMatch-

AND

amdryzen_threadripper_3990xMatch-

Node

amdryzen_threadripper_pro_3945wx_firmwareMatch-

AND

amdryzen_threadripper_pro_3945wxMatch-

Node

amdryzen_threadripper_pro_3955wx_firmwareMatch-

AND

amdryzen_threadripper_pro_3955wxMatch-

Node

amdryzen_threadripper_pro_3975wx_firmwareMatch-

AND

amdryzen_threadripper_pro_3975wxMatch-

Node

amdryzen_threadripper_pro_3995wx_firmwareMatch-

AND

amdryzen_threadripper_pro_3995wxMatch-

Node

amdryzen_threadripper_pro_5945wx_firmwareMatch-

AND

amdryzen_threadripper_pro_5945wxMatch-

Node

amdryzen_threadripper_pro_5955wx_firmwareMatch-

AND

amdryzen_threadripper_pro_5955wxMatch-

Node

amdryzen_threadripper_pro_5965wx_firmwareMatch-

AND

amdryzen_threadripper_pro_5965wxMatch-

Node

amdryzen_threadripper_pro_5975wx_firmwareMatch-

AND

amdryzen_threadripper_pro_5975wxMatch-

Node

amdryzen_threadripper_pro_5995wx_firmwareMatch-

AND

amdryzen_threadripper_pro_5995wxMatch-

VendorProductVersionCPE
amdradeon_software-cpe:2.3:a:amd:radeon_software:-:*:*:*:*:*:*:*
amdathlon_3050ge_firmware-cpe:2.3:o:amd:athlon_3050ge_firmware:-:*:*:*:*:*:*:*
amdathlon_3050ge-cpe:2.3:h:amd:athlon_3050ge:-:*:*:*:*:*:*:*
amdathlon_3150g_firmware-cpe:2.3:o:amd:athlon_3150g_firmware:-:*:*:*:*:*:*:*
amdathlon_3150g-cpe:2.3:h:amd:athlon_3150g:-:*:*:*:*:*:*:*
amdathlon_3150ge_firmware-cpe:2.3:o:amd:athlon_3150ge_firmware:-:*:*:*:*:*:*:*
amdathlon_3150ge-cpe:2.3:h:amd:athlon_3150ge:-:*:*:*:*:*:*:*
amdryzen_3_2200u_firmware-cpe:2.3:o:amd:ryzen_3_2200u_firmware:-:*:*:*:*:*:*:*
amdryzen_3_2200u-cpe:2.3:h:amd:ryzen_3_2200u:-:*:*:*:*:*:*:*
amdryzen_3_2300u_firmware-cpe:2.3:o:amd:ryzen_3_2300u_firmware:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
amd	radeon_software	-	cpe:2.3:a:amd:radeon_software:-:::::::*
amd	athlon_3050ge_firmware	-	cpe:2.3:o:amd:athlon_3050ge_firmware:-:::::::*
amd	athlon_3050ge	-	cpe:2.3:h:amd:athlon_3050ge:-:::::::*
amd	athlon_3150g_firmware	-	cpe:2.3:o:amd:athlon_3150g_firmware:-:::::::*
amd	athlon_3150g	-	cpe:2.3:h:amd:athlon_3150g:-:::::::*
amd	athlon_3150ge_firmware	-	cpe:2.3:o:amd:athlon_3150ge_firmware:-:::::::*
amd	athlon_3150ge	-	cpe:2.3:h:amd:athlon_3150ge:-:::::::*
amd	ryzen_3_2200u_firmware	-	cpe:2.3:o:amd:ryzen_3_2200u_firmware:-:::::::*
amd	ryzen_3_2200u	-	cpe:2.3:h:amd:ryzen_3_2200u:-:::::::*
amd	ryzen_3_2300u_firmware	-	cpe:2.3:o:amd:ryzen_3_2300u_firmware:-:::::::*

Rows per page:

1-10 of 1251

References

www.amd.com/en/corporate/product-security/bulletin/amd-sb-1027

CVSS2

3.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:P/A:N

CVSS3

7.1

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

EPSS

Percentile

12.6%

JSON

Related for NVD:CVE-2021-26366

prion1 cvelist1 cve1 hp1 amd1