Lucene search

[email protected]NVD:CVE-2021-26390

HistoryMay 10, 2022 - 7:15 p.m.

CVE-2021-26390

2022-05-1019:15:08

[email protected]

web.nvd.nist.gov

cve-2021-26390

uapp

abl

bootloader

memory corruption

data integrity

CVSS2

4.9

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

COMPLETE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:C/A:N

CVSS3

6.2

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS

0.001

Percentile

20.2%

JSON

A malicious or compromised UApp or ABL may coerce the bootloader into corrupting arbitrary memory potentially leading to loss of integrity of data.

Affected configurations

Nvd

Node

amdryzen_5_2600_firmwareMatch-

AND

amdryzen_5_2600Match-

Node

amdryzen_5_2600x_firmwareMatch-

AND

amdryzen_5_2600xMatch-

Node

amdryzen_5_2700x_firmwareMatch-

AND

amdryzen_5_2700xMatch-

Node

amdryzen_5_2700_firmwareMatch-

AND

amdryzen_5_2700Match-

Node

amdryzen_5_3600_firmwareMatch-

AND

amdryzen_5_3600Match-

Node

amdryzen_5_3600x_firmwareMatch-

AND

amdryzen_5_3600xMatch-

Node

amdryzen_7_3700x_firmwareMatch-

AND

amdryzen_7_3700xMatch-

Node

amdryzen_7_3800x_firmwareMatch-

AND

amdryzen_7_3800xMatch-

Node

amdryzen_9_3900x_firmwareMatch-

AND

amdryzen_9_3900xMatch-

Node

amdryzen_9_3950x_firmwareMatch-

AND

amdryzen_9_3950xMatch-

Node

amdryzen_9_5950x_firmwareMatch-

AND

amdryzen_9_5950xMatch-

Node

amdryzen_9_5900x_firmwareMatch-

AND

amdryzen_9_5900xMatch-

Node

amdryzen_7_5800x_firmwareMatch-

AND

amdryzen_7_5800xMatch-

Node

amdryzen_7_5700g_firmwareMatch-

AND

amdryzen_7_5700gMatch-

Node

amdryzen_7_5700ge_firmwareMatch-

AND

amdryzen_7_5700geMatch-

Node

amdryzen_5_5600g_firmwareMatch-

AND

amdryzen_5_5600gMatch-

Node

amdryzen_5_5600x_firmwareMatch-

AND

amdryzen_5_5600xMatch-

Node

amdryzen_5_5600ge_firmwareMatch-

AND

amdryzen_5_5600geMatch-

Node

amdryzen_3_5300g_firmwareMatch-

AND

amdryzen_3_5300gMatch-

Node

amdryzen_3_5300ge_firmwareMatch-

AND

amdryzen_3_5300geMatch-

Node

amdryzen_threadripper_2990wx_firmwareMatch-

AND

amdryzen_threadripper_2990wxMatch-

Node

amdryzen_threadripper_2970wx_firmwareMatch-

AND

amdryzen_threadripper_2970wxMatch-

Node

amdryzen_threadripper_2950x_firmwareMatch-

AND

amdryzen_threadripper_2950xMatch-

Node

amdryzen_threadripper_2920x_firmwareMatch-

AND

amdryzen_threadripper_2920xMatch-

Node

amdryzen_threadripper_3970x_firmwareMatch-

AND

amdryzen_threadripper_3970xMatch-

Node

amdryzen_threadripper_pro_5995wx_firmwareMatch-

AND

amdryzen_threadripper_pro_5995wxMatch-

Node

amdryzen_threadripper_pro_5975wx_firmwareMatch-

AND

amdryzen_threadripper_pro_5975wxMatch-

Node

amdryzen_threadripper_pro_5965wx_firmwareMatch-

AND

amdryzen_threadripper_pro_5965wxMatch-

Node

amdryzen_threadripper_pro_5955wx_firmwareMatch-

AND

amdryzen_threadripper_pro_5955wxMatch-

Node

amdryzen_threadripper_pro_5945wx_firmwareMatch-

AND

amdryzen_threadripper_pro_5945wxMatch-

Node

amdryzen_7_3750h_firmwareMatch-

AND

amdryzen_7_3750hMatch-

Node

amdryzen_7_3700u_firmwareMatch-

AND

amdryzen_7_3700uMatch-

Node

amdryzen_5_3550h_firmwareMatch-

AND

amdryzen_5_3550hMatch-

Node

amdryzen_5_3500u_firmwareMatch-

AND

amdryzen_5_3500uMatch-

Node

amdryzen_3_3300u_firmwareMatch-

AND

amdryzen_3_3300uMatch-

Node

amdryzen_3_3200u_firmwareMatch-

AND

amdryzen_3_3200uMatch-

Node

amdathlon_300u_firmwareMatch-

AND

amdathlon_300uMatch-

VendorProductVersionCPE
amdryzen_5_2600_firmware-cpe:2.3:o:amd:ryzen_5_2600_firmware:-:*:*:*:*:*:*:*
amdryzen_5_2600-cpe:2.3:h:amd:ryzen_5_2600:-:*:*:*:*:*:*:*
amdryzen_5_2600x_firmware-cpe:2.3:o:amd:ryzen_5_2600x_firmware:-:*:*:*:*:*:*:*
amdryzen_5_2600x-cpe:2.3:h:amd:ryzen_5_2600x:-:*:*:*:*:*:*:*
amdryzen_5_2700x_firmware-cpe:2.3:o:amd:ryzen_5_2700x_firmware:-:*:*:*:*:*:*:*
amdryzen_5_2700x-cpe:2.3:h:amd:ryzen_5_2700x:-:*:*:*:*:*:*:*
amdryzen_5_2700_firmware-cpe:2.3:o:amd:ryzen_5_2700_firmware:-:*:*:*:*:*:*:*
amdryzen_5_2700-cpe:2.3:h:amd:ryzen_5_2700:-:*:*:*:*:*:*:*
amdryzen_5_3600_firmware-cpe:2.3:o:amd:ryzen_5_3600_firmware:-:*:*:*:*:*:*:*
amdryzen_5_3600-cpe:2.3:h:amd:ryzen_5_3600:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
amd	ryzen_5_2600_firmware	-	cpe:2.3:o:amd:ryzen_5_2600_firmware:-:::::::*
amd	ryzen_5_2600	-	cpe:2.3:h:amd:ryzen_5_2600:-:::::::*
amd	ryzen_5_2600x_firmware	-	cpe:2.3:o:amd:ryzen_5_2600x_firmware:-:::::::*
amd	ryzen_5_2600x	-	cpe:2.3:h:amd:ryzen_5_2600x:-:::::::*
amd	ryzen_5_2700x_firmware	-	cpe:2.3:o:amd:ryzen_5_2700x_firmware:-:::::::*
amd	ryzen_5_2700x	-	cpe:2.3:h:amd:ryzen_5_2700x:-:::::::*
amd	ryzen_5_2700_firmware	-	cpe:2.3:o:amd:ryzen_5_2700_firmware:-:::::::*
amd	ryzen_5_2700	-	cpe:2.3:h:amd:ryzen_5_2700:-:::::::*
amd	ryzen_5_3600_firmware	-	cpe:2.3:o:amd:ryzen_5_3600_firmware:-:::::::*
amd	ryzen_5_3600	-	cpe:2.3:h:amd:ryzen_5_3600:-:::::::*

Rows per page:

1-10 of 741

References

www.amd.com/en/corporate/product-security/bulletin/amd-sb-1027

CVSS2

4.9

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

COMPLETE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:C/A:N

CVSS3

6.2

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS

0.001

Percentile

20.2%

JSON

Related for NVD:CVE-2021-26390

cve1 cvelist1 prion1 amd2 hp1