Medium severity · published Nov 14, 2023
CVE-2021-46766
Improper clearing of sensitive data in the ASP Bootloader may expose secret keys to a privileged attacker accessing ASP SRAM, potentially leading to a loss of confidentiality
5.5
CVSS
0.2%
EPSS
No
On KEV
Description
Improper clearing of sensitive data in the ASP Bootloader may expose secret keys to a privileged attacker accessing ASP SRAM, potentially leading to a loss of confidentiality.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 14% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
4G
4th Gen AMD EPYC™ Processors · AMD
various · source: vendor
AE
AMD EPYC™ Embedded 9003 · AMD
various · source: vendor
RT
Ryzen™ Threadripper™ PRO 3000WX Series Processors “Chagall” WS · AMD
various · source: vendor
E9
Epyc 9124 Firmware · Amd
before genoapi_1.0.0.4 · source: NVD
E9
Epyc 9174f Firmware · Amd
before genoapi_1.0.0.4 · source: NVD
E9
Epyc 9184x Firmware · Amd
before genoapi_1.0.0.4 · source: NVD
E9
Epyc 9224 Firmware · Amd
before genoapi_1.0.0.4 · source: NVD
E9
Epyc 9254 Firmware · Amd
before genoapi_1.0.0.4 · source: NVD
E9
Epyc 9274f Firmware · Amd
before genoapi_1.0.0.4 · source: NVD
E9
Epyc 9334 Firmware · Amd
before genoapi_1.0.0.4 · source: NVD
E9
Epyc 9354 Firmware · Amd
before genoapi_1.0.0.4 · source: NVD
E9
Epyc 9354p Firmware · Amd
before genoapi_1.0.0.4 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2021-46766
CVE.org
https://www.cve.org/CVERecord?id=CVE-2021-46766
Vendor Advisory
https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3002
Vendor Advisory
https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4002
www.amd.com
https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-5001
More from 4th Gen AMD EPYC™ Processors
7.9
CVE-2024-21980
Improper restriction of write operations in SNP firmware could allow a malicious hypervisor to potentially overwrite a guest's memory or UMC seed resulting in loss of…
7.9
CVE-2024-21978
Improper input validation in SEV-SNP could allow a malicious hypervisor to read or overwrite guest memory potentially leading to data leakage or data corruption
7.5
CVE-2023-31315
Improper validation in a model specific register (MSR) could allow a malicious program with ring0 access to modify SMM configuration while SMI lock is enabled, potentially leading…
7.5
CVE-2023-20566
Improper address validation in ASP with SNP enabled may potentially allow an attacker to compromise guest memory integrity
7.5
CVE-2021-46774
Insufficient DRAM address validation in System Management Unit (SMU) may allow an attacker to read/write from/to an invalid DRAM address, potentially resulting in…