Lucene search

[email protected]NVD:CVE-2021-46758

HistoryNov 14, 2023 - 7:15 p.m.

CVE-2021-46758

2023-11-1419:15:10

[email protected]

web.nvd.nist.gov

spi flash

validation

amd secure processor

memory mapped

availability

integrity

6.1 Medium

CVSS3

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

0.0004 Low

EPSS

Percentile

15.8%

JSON

Insufficient validation of SPI flash addresses in the ASP (AMD Secure Processor) bootloader may allow an attacker to read data in memory mapped beyond SPI flash resulting in a potential loss of availability and integrity.

Affected configurations

NVD

Node

amdryzen_7_5700g_firmwareRange<comboam4v2_pi_1.2.0.8

AND

amdryzen_7_5700gMatch-

Node

amdryzen_7_5700ge_firmwareRange<comboam4v2_pi_1.2.0.8

AND

amdryzen_7_5700geMatch-

Node

amdryzen_5_5600g_firmwareRange<comboam4v2_pi_1.2.0.8

AND

amdryzen_5_5600gMatch-

Node

amdryzen_5_5600ge_firmwareRange<comboam4v2_pi_1.2.0.8

AND

amdryzen_5_5600geMatch-

Node

amdryzen_3_5300g_firmwareRange<comboam4v2_pi_1.2.0.8

AND

amdryzen_3_5300gMatch-

Node

amdryzen_3_5300ge_firmwareRange<comboam4v2_pi_1.2.0.8

AND

amdryzen_3_5300geMatch-

Node

amdryzen_9_7950x3d_firmwareRange<comboam5_1.0.0.1

AND

amdryzen_9_7950x3dMatch-

Node

amdryzen_9_7900x3d_firmwareRange<comboam5_1.0.0.1

AND

amdryzen_9_7900x3dMatch-

Node

amdryzen_7_7800x3d_firmwareRange<comboam5_1.0.0.1

AND

amdryzen_7_7800x3dMatch-

Node

amdryzen_9_4900h_firmwareRange<renoirpi-fp6_1.0.0.a

AND

amdryzen_9_4900hMatch-

Node

amdryzen_9_4900hs_firmwareRange<renoirpi-fp6_1.0.0.a

AND

amdryzen_9_4900hsMatch-

Node

amdryzen_7_4800h_firmwareRange<renoirpi-fp6_1.0.0.a

AND

amdryzen_7_4800hMatch-

Node

amdryzen_7_4800hs_firmwareRange<renoirpi-fp6_1.0.0.a

AND

amdryzen_7_4800hsMatch-

Node

amdryzen_7_4980u_firmwareRange<renoirpi-fp6_1.0.0.a

AND

amdryzen_7_4980uMatch-

Node

amdryzen_7_4800u_firmwareRange<renoirpi-fp6_1.0.0.a

AND

amdryzen_7_4800uMatch-

Node

amdryzen_7_4700u_firmwareRange<renoirpi-fp6_1.0.0.a

AND

amdryzen_7_4700uMatch-

Node

amdryzen_5_4600h_firmwareRange<renoirpi-fp6_1.0.0.a

AND

amdryzen_5_4600hMatch-

Node

amdryzen_5_4600hs_firmwareRange<renoirpi-fp6_1.0.0.a

AND

amdryzen_5_4600hsMatch-

Node

amdryzen_5_4680u_firmwareRange<renoirpi-fp6_1.0.0.a

AND

amdryzen_5_4680uMatch-

Node

amdryzen_5_4600u_firmwareRange<renoirpi-fp6_1.0.0.a

AND

amdryzen_5_4600uMatch-

Node

amdryzen_5_4500u_firmwareRange<renoirpi-fp6_1.0.0.a

AND

amdryzen_5_4500uMatch-

Node

amdryzen_3_4300u_firmwareRange<renoirpi-fp6_1.0.0.a

AND

amdryzen_3_4300uMatch-

Node

amdryzen_7_5700u_firmwareRange<cezannepi-fp6_1.0.0.c

AND

amdryzen_7_5700uMatch-

Node

amdryzen_5_5500u_firmwareRange<cezannepi-fp6_1.0.0.c

AND

amdryzen_5_5500uMatch-

Node

amdryzen_3_5300u_firmwareRange<cezannepi-fp6_1.0.0.c

AND

amdryzen_3_5300uMatch-

Node

amdryzen_9_5980hx_firmwareRange<cezannepi-fp6_1.0.0.c

AND

amdryzen_9_5980hxMatch-

Node

amdryzen_9_5980hs_firmwareRange<cezannepi-fp6_1.0.0.c

AND

amdryzen_9_5980hsMatch-

Node

amdryzen_9_5900hx_firmwareRange<cezannepi-fp6_1.0.0.c

AND

amdryzen_9_5900hxMatch-

Node

amdryzen_9_5900hs_firmwareRange<cezannepi-fp6_1.0.0.c

AND

amdryzen_9_5900hsMatch-

Node

amdryzen_7_5800h_firmwareRange<cezannepi-fp6_1.0.0.c

AND

amdryzen_7_5800hMatch-

Node

amdryzen_7_5800hs_firmwareRange<cezannepi-fp6_1.0.0.c

AND

amdryzen_7_5800hsMatch-

Node

amdryzen_7_5825u_firmwareRange<cezannepi-fp6_1.0.0.c

AND

amdryzen_7_5825uMatch-

Node

amdryzen_7_5800u_firmwareRange<cezannepi-fp6_1.0.0.c

AND

amdryzen_7_5800uMatch-

Node

amdryzen_5_5600h_firmwareRange<cezannepi-fp6_1.0.0.c

AND

amdryzen_5_5600hMatch-

Node

amdryzen_5_5600hs_firmwareRange<cezannepi-fp6_1.0.0.c

AND

amdryzen_5_5600hsMatch-

Node

amdryzen_5_5625u_firmwareRange<cezannepi-fp6_1.0.0.c

AND

amdryzen_5_5625uMatch-

Node

amdryzen_5_5600u_firmwareRange<cezannepi-fp6_1.0.0.c

AND

amdryzen_5_5600uMatch-

Node

amdryzen_5_5560u_firmwareRange<cezannepi-fp6_1.0.0.c

AND

amdryzen_5_5560uMatch-

Node

amdryzen_5_5500h_firmwareRange<cezannepi-fp6_1.0.0.c

AND

amdryzen_5_5500hMatch-

Node

amdryzen_3_5425u_firmwareRange<cezannepi-fp6_1.0.0.c

AND

amdryzen_3_5425uMatch-

Node

amdryzen_3_5400u_firmwareRange<cezannepi-fp6_1.0.0.c

AND

amdryzen_3_5400uMatch-

Node

amdryzen_3_5125c_firmwareRange<cezannepi-fp6_1.0.0.c

AND

amdryzen_3_5125cMatch-

Node

amdryzen_9_6980hx_firmwareRange<rembrandtpi-fp7_1.0.0.5

AND

amdryzen_9_6980hxMatch-

Node

amdryzen_9_6980hs_firmwareRange<rembrandtpi-fp7_1.0.0.5

AND

amdryzen_9_6980hsMatch-

Node

amdryzen_9_6900hx_firmwareRange<rembrandtpi-fp7_1.0.0.5

AND

amdryzen_9_6900hxMatch-

Node

amdryzen_9_6900hs_firmwareRange<rembrandtpi-fp7_1.0.0.5

AND

amdryzen_9_6900hsMatch-

Node

amdryzen_7_6800h_firmwareRange<rembrandtpi-fp7_1.0.0.5

AND

amdryzen_7_6800hMatch-

Node

amdryzen_7_6800hs_firmwareRange<rembrandtpi-fp7_1.0.0.5

AND

amdryzen_7_6800hsMatch-

Node

amdryzen_7_6800u_firmwareRange<rembrandtpi-fp7_1.0.0.5

AND

amdryzen_7_6800uMatch-

Node

amdryzen_5_6600h_firmwareRange<rembrandtpi-fp7_1.0.0.5

AND

amdryzen_5_6600hMatch-

Node

amdryzen_5_6600hs_firmwareRange<rembrandtpi-fp7_1.0.0.5

AND

amdryzen_5_6600hsMatch-

Node

amdryzen_5_6600u_firmwareRange<rembrandtpi-fp7_1.0.0.5

AND

amdryzen_5_6600uMatch-

Node

amdryzen_7_7735hs_firmwareRange<rembrandtpi-fp7_1.0.0.5

AND

amdryzen_7_7735hsMatch-

Node

amdryzen_7_7736u_firmwareRange<rembrandtpi-fp7_1.0.0.5

AND

amdryzen_7_7736uMatch-

Node

amdryzen_7_7735u_firmwareRange<rembrandtpi-fp7_1.0.0.5

AND

amdryzen_7_7735uMatch-

Node

amdryzen_5_7535hs_firmwareRange<rembrandtpi-fp7_1.0.0.5

AND

amdryzen_5_7535hsMatch-

Node

amdryzen_5_7535u_firmwareRange<rembrandtpi-fp7_1.0.0.5

AND

amdryzen_5_7535uMatch-

Node

amdryzen_3_7335u_firmwareRange<rembrandtpi-fp7_1.0.0.5

AND

amdryzen_3_7335uMatch-

Node

amdryzen_7_pro_7730u_firmwareRange<cezannepi-fp6_1.0.0.c

AND

amdryzen_7_pro_7730uMatch-

Node

amdryzen_5_pro_7530u_firmwareRange<cezannepi-fp6_1.0.0.c

AND

amdryzen_5_pro_7530uMatch-

Node

amdryzen_3_pro_7330u_firmwareRange<cezannepi-fp6_1.0.0.c

AND

amdryzen_3_pro_7330uMatch-

References

www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4002

6.1 Medium

CVSS3

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

0.0004 Low

EPSS

Percentile

15.8%

JSON

Related for NVD:CVE-2021-46758

cvelist1 prion1 cve1 hp1 amd1