AMD 1st Gen AMD EPYCâ„¢

CVE-2021-26321
MEDIUM 5.5

At a glance

Source
NVD
EPSS
EPSS 0.25 % · percentile 17 ()
State
PUBLISHED
Published
Updated
Assigner
AMD
NVD status
Modified

Description

Insufficient ID command validation in the SEV Firmware may allow a local authenticated attacker to perform a denial of service of the PSP.

Weaknesses (CWE)

  • CWE-20 — Improper Input Validation
  • CWE-77 — Improper Neutralization of Special Elements used in a Command

References

Scores

VersionScoreVectorScored by
CVSS 3.1MEDIUM 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HNVD · nvd@nist.gov (Primary)
CVSS 2.0MEDIUM 4.9AV:L/AC:L/Au:N/C:N/I:N/A:CNVD · nvd@nist.gov (Primary)

European references

Affected configurations (NVD CPE)

Affected products

ProductVersions
AMD · 1st Gen AMD EPYC™affected unspecified < NaplesPI-SP3_1.0.0.G
AMD · 2nd Gen AMD EPYC™affected unspecified < RomePI-SP3_1.0.0.C
AMD · 3rd Gen AMD EPYC™affected unspecified < MilanPI-SP3_1.0.0.4

Sources

SourceLicence
CVE List (CVEProject cvelistV5)CVE Program Terms of Use
EPSS (FIRST.org)FIRST — attribution requested
ENISA EUVDENISA — reproduction authorised, source acknowledged
NVD (NIST) via fkie-cad/nvd-json-data-feedsPublic domain — this product uses data from the NVD API but is not endorsed or certified by the NVD