NVD Vulnerability Detail
Search Exploit, PoC
CVE-2021-26402
Summary

Insufficient bounds checking in ASP (AMD Secure Processor) firmware while handling BIOS mailbox commands, may allow an attacker to write partially-controlled data out-of-bounds to SMM or SEV-ES regions which may lead to a potential loss of integrity and availability.

Publication Date Jan. 11, 2023, 5:15 p.m.
Registration Date Jan. 12, 2023, 10:01 a.m.
Last Update Nov. 21, 2024, 2:56 p.m.
CVSS3.1 : HIGH
スコア 7.1
Vector CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
攻撃元区分(AV) ローカル
攻撃条件の複雑さ(AC) 低
攻撃に必要な特権レベル(PR) 低
利用者の関与(UI) 不要
影響の想定範囲(S) 変更なし
機密性への影響(C) なし
完全性への影響(I) 高
可用性への影響(A) 高
Affected software configurations
Configuration1 or higher or less more than less than
cpe:2.3:o:amd:epyc_7h12_firmware:*:*:*:*:*:*:*:* romepi_1.0.0.c
execution environment
1 cpe:2.3:h:amd:epyc_7h12:-:*:*:*:*:*:*:*
Configuration2 or higher or less more than less than
cpe:2.3:o:amd:epyc_7f72_firmware:*:*:*:*:*:*:*:* romepi_1.0.0.c
execution environment
1 cpe:2.3:h:amd:epyc_7f72:-:*:*:*:*:*:*:*
Configuration3 or higher or less more than less than
cpe:2.3:o:amd:epyc_7f52_firmware:*:*:*:*:*:*:*:* romepi_1.0.0.c
execution environment
1 cpe:2.3:h:amd:epyc_7f52:-:*:*:*:*:*:*:*
Configuration4 or higher or less more than less than
cpe:2.3:o:amd:epyc_7f32_firmware:*:*:*:*:*:*:*:* romepi_1.0.0.c
execution environment
1 cpe:2.3:h:amd:epyc_7f32:-:*:*:*:*:*:*:*
Configuration5 or higher or less more than less than
cpe:2.3:o:amd:epyc_7742_firmware:*:*:*:*:*:*:*:* romepi_1.0.0.c
execution environment
1 cpe:2.3:h:amd:epyc_7742:-:*:*:*:*:*:*:*
Configuration6 or higher or less more than less than
cpe:2.3:o:amd:epyc_7702p_firmware:*:*:*:*:*:*:*:* romepi_1.0.0.c
execution environment
1 cpe:2.3:h:amd:epyc_7702p:-:*:*:*:*:*:*:*
Configuration7 or higher or less more than less than
cpe:2.3:o:amd:epyc_7702_firmware:*:*:*:*:*:*:*:* romepi_1.0.0.c
execution environment
1 cpe:2.3:h:amd:epyc_7702:-:*:*:*:*:*:*:*
Configuration8 or higher or less more than less than
cpe:2.3:o:amd:epyc_7662_firmware:*:*:*:*:*:*:*:* romepi_1.0.0.c
execution environment
1 cpe:2.3:h:amd:epyc_7662:-:*:*:*:*:*:*:*
Configuration9 or higher or less more than less than
cpe:2.3:o:amd:epyc_7642_firmware:*:*:*:*:*:*:*:* romepi_1.0.0.c
execution environment
1 cpe:2.3:h:amd:epyc_7642:-:*:*:*:*:*:*:*
Configuration10 or higher or less more than less than
cpe:2.3:o:amd:epyc_7552_firmware:*:*:*:*:*:*:*:* romepi_1.0.0.c
execution environment
1 cpe:2.3:h:amd:epyc_7552:-:*:*:*:*:*:*:*
Configuration11 or higher or less more than less than
cpe:2.3:o:amd:epyc_7542_firmware:*:*:*:*:*:*:*:* romepi_1.0.0.c
execution environment
1 cpe:2.3:h:amd:epyc_7542:-:*:*:*:*:*:*:*
Configuration12 or higher or less more than less than
cpe:2.3:o:amd:epyc_7532_firmware:*:*:*:*:*:*:*:* romepi_1.0.0.c
execution environment
1 cpe:2.3:h:amd:epyc_7532:-:*:*:*:*:*:*:*
Configuration13 or higher or less more than less than
cpe:2.3:o:amd:epyc_7502p_firmware:*:*:*:*:*:*:*:* romepi_1.0.0.c
execution environment
1 cpe:2.3:h:amd:epyc_7502p:-:*:*:*:*:*:*:*
Configuration14 or higher or less more than less than
cpe:2.3:o:amd:epyc_7502_firmware:*:*:*:*:*:*:*:* romepi_1.0.0.c
execution environment
1 cpe:2.3:h:amd:epyc_7502:-:*:*:*:*:*:*:*
Configuration15 or higher or less more than less than
cpe:2.3:o:amd:epyc_7452_firmware:*:*:*:*:*:*:*:* romepi_1.0.0.c
execution environment
1 cpe:2.3:h:amd:epyc_7452:-:*:*:*:*:*:*:*
Configuration16 or higher or less more than less than
cpe:2.3:o:amd:epyc_7402_firmware:*:*:*:*:*:*:*:* romepi_1.0.0.c
execution environment
1 cpe:2.3:h:amd:epyc_7402:-:*:*:*:*:*:*:*
Configuration17 or higher or less more than less than
cpe:2.3:o:amd:epyc_7402p_firmware:*:*:*:*:*:*:*:* romepi_1.0.0.c
execution environment
1 cpe:2.3:h:amd:epyc_7402p:-:*:*:*:*:*:*:*
Configuration18 or higher or less more than less than
cpe:2.3:o:amd:epyc_7352_firmware:*:*:*:*:*:*:*:* romepi_1.0.0.c
execution environment
1 cpe:2.3:h:amd:epyc_7352:-:*:*:*:*:*:*:*
Configuration19 or higher or less more than less than
cpe:2.3:o:amd:epyc_7302p_firmware:*:*:*:*:*:*:*:* romepi_1.0.0.c
execution environment
1 cpe:2.3:h:amd:epyc_7302p:-:*:*:*:*:*:*:*
Configuration20 or higher or less more than less than
cpe:2.3:o:amd:epyc_7302_firmware:*:*:*:*:*:*:*:* romepi_1.0.0.c
execution environment
1 cpe:2.3:h:amd:epyc_7302:-:*:*:*:*:*:*:*
Configuration21 or higher or less more than less than
cpe:2.3:o:amd:epyc_7282_firmware:*:*:*:*:*:*:*:* romepi_1.0.0.c
execution environment
1 cpe:2.3:h:amd:epyc_7282:-:*:*:*:*:*:*:*
Configuration22 or higher or less more than less than
cpe:2.3:o:amd:epyc_7272_firmware:*:*:*:*:*:*:*:* romepi_1.0.0.c
execution environment
1 cpe:2.3:h:amd:epyc_7272:-:*:*:*:*:*:*:*
Configuration23 or higher or less more than less than
cpe:2.3:o:amd:epyc_7262_firmware:*:*:*:*:*:*:*:* romepi_1.0.0.c
execution environment
1 cpe:2.3:h:amd:epyc_7262:-:*:*:*:*:*:*:*
Configuration24 or higher or less more than less than
cpe:2.3:o:amd:epyc_7252_firmware:*:*:*:*:*:*:*:* romepi_1.0.0.c
execution environment
1 cpe:2.3:h:amd:epyc_7252:-:*:*:*:*:*:*:*
Configuration25 or higher or less more than less than
cpe:2.3:o:amd:epyc_7232p_firmware:*:*:*:*:*:*:*:* romepi_1.0.0.c
execution environment
1 cpe:2.3:h:amd:epyc_7232p:-:*:*:*:*:*:*:*
Configuration26 or higher or less more than less than
cpe:2.3:o:amd:epyc_7002_firmware:*:*:*:*:*:*:*:* romepi_1.0.0.c
execution environment
1 cpe:2.3:h:amd:epyc_7002:-:*:*:*:*:*:*:*
Configuration27 or higher or less more than less than
cpe:2.3:o:amd:epyc_7003_firmware:*:*:*:*:*:*:*:* milanpi_1.0.0.4
execution environment
1 cpe:2.3:h:amd:epyc_7003:-:*:*:*:*:*:*:*
Configuration28 or higher or less more than less than
cpe:2.3:o:amd:epyc_72f3_firmware:*:*:*:*:*:*:*:* milanpi_1.0.0.4
execution environment
1 cpe:2.3:h:amd:epyc_72f3:-:*:*:*:*:*:*:*
Configuration29 or higher or less more than less than
cpe:2.3:o:amd:epyc_7313_firmware:*:*:*:*:*:*:*:* milanpi_1.0.0.4
execution environment
1 cpe:2.3:h:amd:epyc_7313:-:*:*:*:*:*:*:*
Configuration30 or higher or less more than less than
cpe:2.3:o:amd:epyc_7313p_firmware:*:*:*:*:*:*:*:* milanpi_1.0.0.4
execution environment
1 cpe:2.3:h:amd:epyc_7313p:-:*:*:*:*:*:*:*
Configuration31 or higher or less more than less than
cpe:2.3:o:amd:epyc_7343_firmware:*:*:*:*:*:*:*:* milanpi_1.0.0.4
execution environment
1 cpe:2.3:h:amd:epyc_7343:-:*:*:*:*:*:*:*
Configuration32 or higher or less more than less than
cpe:2.3:o:amd:epyc_7373x_firmware:*:*:*:*:*:*:*:* milanpi_1.0.0.4
execution environment
1 cpe:2.3:h:amd:epyc_7373x:-:*:*:*:*:*:*:*
Configuration33 or higher or less more than less than
cpe:2.3:o:amd:epyc_73f3_firmware:*:*:*:*:*:*:*:* milanpi_1.0.0.4
execution environment
1 cpe:2.3:h:amd:epyc_73f3:-:*:*:*:*:*:*:*
Configuration34 or higher or less more than less than
cpe:2.3:o:amd:epyc_7413_firmware:*:*:*:*:*:*:*:* milanpi_1.0.0.4
execution environment
1 cpe:2.3:h:amd:epyc_7413:-:*:*:*:*:*:*:*
Configuration35 or higher or less more than less than
cpe:2.3:o:amd:epyc_7443_firmware:*:*:*:*:*:*:*:* milanpi_1.0.0.4
execution environment
1 cpe:2.3:h:amd:epyc_7443:-:*:*:*:*:*:*:*
Configuration36 or higher or less more than less than
cpe:2.3:o:amd:epyc_7443p_firmware:*:*:*:*:*:*:*:* milanpi_1.0.0.4
execution environment
1 cpe:2.3:h:amd:epyc_7443p:-:*:*:*:*:*:*:*
Configuration37 or higher or less more than less than
cpe:2.3:o:amd:epyc_7453_firmware:*:*:*:*:*:*:*:* milanpi_1.0.0.4
execution environment
1 cpe:2.3:h:amd:epyc_7453:-:*:*:*:*:*:*:*
Configuration38 or higher or less more than less than
cpe:2.3:o:amd:epyc_74f3_firmware:*:*:*:*:*:*:*:* milanpi_1.0.0.4
execution environment
1 cpe:2.3:h:amd:epyc_74f3:-:*:*:*:*:*:*:*
Configuration39 or higher or less more than less than
cpe:2.3:o:amd:epyc_7513_firmware:*:*:*:*:*:*:*:* milanpi_1.0.0.4
execution environment
1 cpe:2.3:h:amd:epyc_7513:-:*:*:*:*:*:*:*
Configuration40 or higher or less more than less than
cpe:2.3:o:amd:epyc_7543_firmware:*:*:*:*:*:*:*:* milanpi_1.0.0.4
execution environment
1 cpe:2.3:h:amd:epyc_7543:-:*:*:*:*:*:*:*
Configuration41 or higher or less more than less than
cpe:2.3:o:amd:epyc_7543p_firmware:*:*:*:*:*:*:*:* milanpi_1.0.0.4
execution environment
1 cpe:2.3:h:amd:epyc_7543p:-:*:*:*:*:*:*:*
Configuration42 or higher or less more than less than
cpe:2.3:o:amd:epyc_7573x_firmware:*:*:*:*:*:*:*:* milanpi_1.0.0.4
execution environment
1 cpe:2.3:h:amd:epyc_7573x:-:*:*:*:*:*:*:*
Configuration43 or higher or less more than less than
cpe:2.3:o:amd:epyc_75f3_firmware:*:*:*:*:*:*:*:* milanpi_1.0.0.4
execution environment
1 cpe:2.3:h:amd:epyc_75f3:-:*:*:*:*:*:*:*
Configuration44 or higher or less more than less than
cpe:2.3:o:amd:epyc_7643_firmware:*:*:*:*:*:*:*:* milanpi_1.0.0.4
execution environment
1 cpe:2.3:h:amd:epyc_7643:-:*:*:*:*:*:*:*
Configuration45 or higher or less more than less than
cpe:2.3:o:amd:epyc_7663_firmware:*:*:*:*:*:*:*:* milanpi_1.0.0.4
execution environment
1 cpe:2.3:h:amd:epyc_7663:-:*:*:*:*:*:*:*
Configuration46 or higher or less more than less than
cpe:2.3:o:amd:epyc_7713_firmware:*:*:*:*:*:*:*:* milanpi_1.0.0.4
execution environment
1 cpe:2.3:h:amd:epyc_7713:-:*:*:*:*:*:*:*
Configuration47 or higher or less more than less than
cpe:2.3:o:amd:epyc_7713p_firmware:*:*:*:*:*:*:*:* milanpi_1.0.0.4
execution environment
1 cpe:2.3:h:amd:epyc_7713p:-:*:*:*:*:*:*:*
Configuration48 or higher or less more than less than
cpe:2.3:o:amd:epyc_7743_firmware:*:*:*:*:*:*:*:* milanpi_1.0.0.4
execution environment
1 cpe:2.3:h:amd:epyc_7743:-:*:*:*:*:*:*:*
Configuration49 or higher or less more than less than
cpe:2.3:o:amd:epyc_7763_firmware:*:*:*:*:*:*:*:* milanpi_1.0.0.4
execution environment
1 cpe:2.3:h:amd:epyc_7763:-:*:*:*:*:*:*:*
Configuration50 or higher or less more than less than
cpe:2.3:o:amd:epyc_7773x_firmware:*:*:*:*:*:*:*:* milanpi_1.0.0.4
execution environment
1 cpe:2.3:h:amd:epyc_7773x:-:*:*:*:*:*:*:*
Related information, measures and tools
Common Vulnerabilities List