CVE-2021-26343

· MEDIUMModified

← All CVEs

CVSS v3.1

5.5

EPSS

0.18%

Published

Jan 11, 2023

Modified

Apr 9, 2025

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Insufficient validation in ASP BIOS and DRTM commands may allow malicious supervisor x86 software to disclose the contents of sensitive memory which may result in information disclosure.

CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weaknesses (CWE)

CWE-668CWE-668

Affected Products (48)

amd · epyc_7003_firmware (up to milanpi_1.0.0.3)vulnerable

amd · epyc_7003

amd · epyc_72f3_firmware (up to milanpi_1.0.0.3)vulnerable

amd · epyc_72f3

amd · epyc_7313_firmware (up to milanpi_1.0.0.3)vulnerable

amd · epyc_7313

amd · epyc_7313p_firmware (up to milanpi_1.0.0.3)vulnerable

amd · epyc_7313p

amd · epyc_7343_firmware (up to milanpi_1.0.0.3)vulnerable

amd · epyc_7343

amd · epyc_7373x_firmware (up to milanpi_1.0.0.3)vulnerable

amd · epyc_7373x

amd · epyc_73f3_firmware (up to milanpi_1.0.0.3)vulnerable

amd · epyc_73f3

amd · epyc_7413_firmware (up to milanpi_1.0.0.3)vulnerable

amd · epyc_7413

amd · epyc_7443_firmware (up to milanpi_1.0.0.3)vulnerable

amd · epyc_7443

amd · epyc_7443p_firmware (up to milanpi_1.0.0.3)vulnerable

amd · epyc_7443p

amd · epyc_7453_firmware (up to milanpi_1.0.0.3)vulnerable

amd · epyc_7453

amd · epyc_74f3_firmware (up to milanpi_1.0.0.3)vulnerable

amd · epyc_74f3

amd · epyc_7513_firmware (up to milanpi_1.0.0.3)vulnerable

amd · epyc_7513

amd · epyc_7543_firmware (up to milanpi_1.0.0.3)vulnerable

amd · epyc_7543

amd · epyc_7543p_firmware (up to milanpi_1.0.0.3)vulnerable

amd · epyc_7543p

amd · epyc_7573x_firmware (up to milanpi_1.0.0.3)vulnerable

amd · epyc_7573x

amd · epyc_75f3_firmware (up to milanpi_1.0.0.3)vulnerable

amd · epyc_75f3

amd · epyc_7643_firmware (up to milanpi_1.0.0.3)vulnerable

amd · epyc_7643

amd · epyc_7663_firmware (up to milanpi_1.0.0.3)vulnerable

amd · epyc_7663

amd · epyc_7713_firmware (up to milanpi_1.0.0.3)vulnerable

amd · epyc_7713

amd · epyc_7713p_firmware (up to milanpi_1.0.0.3)vulnerable

amd · epyc_7713p

amd · epyc_7743_firmware (up to milanpi_1.0.0.3)vulnerable

amd · epyc_7743

amd · epyc_7763_firmware (up to milanpi_1.0.0.3)vulnerable

amd · epyc_7763

amd · epyc_7773x_firmware (up to milanpi_1.0.0.3)vulnerable

amd · epyc_7773x

References (2)

https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032

Vendor Advisory

https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032

Vendor Advisory

KEV Catalog EPSS Scores Vendors All CVEs