AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics “Cezanne”
En bref
- Source
- NVD
- EPSS
- EPSS 0.33 % · centile 26 ()
- État
- PUBLISHED
- Publiée
- Mise à jour
- Attribuée par
- AMD
- Statut NVD
- Modified
Rechercher sur…
Description
Insufficient validation of SPI flash addresses in the ASP (AMD Secure Processor) bootloader may allow an attacker to read data in memory mapped beyond SPI flash resulting in a potential loss of availability and integrity.
Références
Scores
| Version | Score | Vecteur | Évalué par |
|---|---|---|---|
| CVSS 3.1 | MEDIUM 6.1 | CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H | NVD · nvd@nist.gov (Primary) |
Références européennes
- ENISA EUVD · EUVD-2021-33414
- GCVE · GCVE-0-2021-46758
Configurations affectées (CPE NVD)
cpe:2.3:o:amd:ryzen_7_5700g_firmware:*:*:*:*:*:*:*:*< comboam4v2_pi_1.2.0.8cpe:2.3:o:amd:ryzen_7_5700ge_firmware:*:*:*:*:*:*:*:*< comboam4v2_pi_1.2.0.8cpe:2.3:o:amd:ryzen_5_5600g_firmware:*:*:*:*:*:*:*:*< comboam4v2_pi_1.2.0.8cpe:2.3:o:amd:ryzen_5_5600ge_firmware:*:*:*:*:*:*:*:*< comboam4v2_pi_1.2.0.8cpe:2.3:o:amd:ryzen_3_5300g_firmware:*:*:*:*:*:*:*:*< comboam4v2_pi_1.2.0.8cpe:2.3:o:amd:ryzen_3_5300ge_firmware:*:*:*:*:*:*:*:*< comboam4v2_pi_1.2.0.8cpe:2.3:o:amd:ryzen_9_7950x3d_firmware:*:*:*:*:*:*:*:*< comboam5_1.0.0.1cpe:2.3:o:amd:ryzen_9_7900x3d_firmware:*:*:*:*:*:*:*:*< comboam5_1.0.0.1cpe:2.3:o:amd:ryzen_7_7800x3d_firmware:*:*:*:*:*:*:*:*< comboam5_1.0.0.1cpe:2.3:o:amd:ryzen_9_4900h_firmware:*:*:*:*:*:*:*:*< renoirpi-fp6_1.0.0.acpe:2.3:o:amd:ryzen_9_4900hs_firmware:*:*:*:*:*:*:*:*< renoirpi-fp6_1.0.0.acpe:2.3:o:amd:ryzen_7_4800h_firmware:*:*:*:*:*:*:*:*< renoirpi-fp6_1.0.0.acpe:2.3:o:amd:ryzen_7_4800hs_firmware:*:*:*:*:*:*:*:*< renoirpi-fp6_1.0.0.acpe:2.3:o:amd:ryzen_7_4980u_firmware:*:*:*:*:*:*:*:*< renoirpi-fp6_1.0.0.acpe:2.3:o:amd:ryzen_7_4800u_firmware:*:*:*:*:*:*:*:*< renoirpi-fp6_1.0.0.acpe:2.3:o:amd:ryzen_7_4700u_firmware:*:*:*:*:*:*:*:*< renoirpi-fp6_1.0.0.acpe:2.3:o:amd:ryzen_5_4600h_firmware:*:*:*:*:*:*:*:*< renoirpi-fp6_1.0.0.acpe:2.3:o:amd:ryzen_5_4600hs_firmware:*:*:*:*:*:*:*:*< renoirpi-fp6_1.0.0.acpe:2.3:o:amd:ryzen_5_4680u_firmware:*:*:*:*:*:*:*:*< renoirpi-fp6_1.0.0.acpe:2.3:o:amd:ryzen_5_4600u_firmware:*:*:*:*:*:*:*:*< renoirpi-fp6_1.0.0.acpe:2.3:o:amd:ryzen_5_4500u_firmware:*:*:*:*:*:*:*:*< renoirpi-fp6_1.0.0.acpe:2.3:o:amd:ryzen_3_4300u_firmware:*:*:*:*:*:*:*:*< renoirpi-fp6_1.0.0.acpe:2.3:o:amd:ryzen_7_5700u_firmware:*:*:*:*:*:*:*:*< cezannepi-fp6_1.0.0.ccpe:2.3:o:amd:ryzen_5_5500u_firmware:*:*:*:*:*:*:*:*< cezannepi-fp6_1.0.0.ccpe:2.3:o:amd:ryzen_3_5300u_firmware:*:*:*:*:*:*:*:*< cezannepi-fp6_1.0.0.ccpe:2.3:o:amd:ryzen_9_5980hx_firmware:*:*:*:*:*:*:*:*< cezannepi-fp6_1.0.0.ccpe:2.3:o:amd:ryzen_9_5980hs_firmware:*:*:*:*:*:*:*:*< cezannepi-fp6_1.0.0.ccpe:2.3:o:amd:ryzen_9_5900hx_firmware:*:*:*:*:*:*:*:*< cezannepi-fp6_1.0.0.ccpe:2.3:o:amd:ryzen_9_5900hs_firmware:*:*:*:*:*:*:*:*< cezannepi-fp6_1.0.0.ccpe:2.3:o:amd:ryzen_7_5800h_firmware:*:*:*:*:*:*:*:*< cezannepi-fp6_1.0.0.ccpe:2.3:o:amd:ryzen_7_5800hs_firmware:*:*:*:*:*:*:*:*< cezannepi-fp6_1.0.0.ccpe:2.3:o:amd:ryzen_7_5825u_firmware:*:*:*:*:*:*:*:*< cezannepi-fp6_1.0.0.ccpe:2.3:o:amd:ryzen_7_5800u_firmware:*:*:*:*:*:*:*:*< cezannepi-fp6_1.0.0.ccpe:2.3:o:amd:ryzen_5_5600h_firmware:*:*:*:*:*:*:*:*< cezannepi-fp6_1.0.0.ccpe:2.3:o:amd:ryzen_5_5600hs_firmware:*:*:*:*:*:*:*:*< cezannepi-fp6_1.0.0.ccpe:2.3:o:amd:ryzen_5_5625u_firmware:*:*:*:*:*:*:*:*< cezannepi-fp6_1.0.0.ccpe:2.3:o:amd:ryzen_5_5600u_firmware:*:*:*:*:*:*:*:*< cezannepi-fp6_1.0.0.ccpe:2.3:o:amd:ryzen_5_5560u_firmware:*:*:*:*:*:*:*:*< cezannepi-fp6_1.0.0.ccpe:2.3:o:amd:ryzen_5_5500h_firmware:*:*:*:*:*:*:*:*< cezannepi-fp6_1.0.0.ccpe:2.3:o:amd:ryzen_3_5425u_firmware:*:*:*:*:*:*:*:*< cezannepi-fp6_1.0.0.c- +21 autres
Produits affectés
| Produit | Versions |
|---|---|
| AMD · Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics “Cezanne” | affected various |
| AMD · Ryzen™ 7000 Series Desktop Processors “Raphael” XD3 | affected various |
| AMD · Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics “Renoir” FP6 | affected various |
| AMD · Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Lucienne” | affected various |
| AMD · Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Cezanne” | affected various |
| AMD · AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics "Rembrandt" | affected various |
| AMD · AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics “Rembrandt-R” | affected various |
| AMD · AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics “Barcelo” | affected various |
| AMD · AMD Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphics “Barcelo-R” | affected various |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |