CVE-2021-26355

· MEDIUMModified

← All CVEs

CVSS v3.1

5.5

EPSS

0.17%

Published

Jan 11, 2023

Modified

Apr 9, 2025

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Insufficient fencing and checks in System Management Unit (SMU) may result in access to invalid message port registers that could result in a potential denial-of-service.

CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weaknesses (CWE)

CWE-693

Affected Products (48)

amd · epyc_7003_firmware (up to milanpi-sp3_1.0.0.7)vulnerable

amd · epyc_7003

amd · epyc_72f3_firmware (up to milanpi-sp3_1.0.0.7)vulnerable

amd · epyc_72f3

amd · epyc_7313_firmware (up to milanpi-sp3_1.0.0.7)vulnerable

amd · epyc_7313

amd · epyc_7313p_firmware (up to milanpi-sp3_1.0.0.7)vulnerable

amd · epyc_7313p

amd · epyc_7343_firmware (up to milanpi-sp3_1.0.0.7)vulnerable

amd · epyc_7343

amd · epyc_7373x_firmware (up to milanpi-sp3_1.0.0.7)vulnerable

amd · epyc_7373x

amd · epyc_73f3_firmware (up to milanpi-sp3_1.0.0.7)vulnerable

amd · epyc_73f3

amd · epyc_7413_firmware (up to milanpi-sp3_1.0.0.7)vulnerable

amd · epyc_7413

amd · epyc_7443_firmware (up to milanpi-sp3_1.0.0.7)vulnerable

amd · epyc_7443

amd · epyc_7443p_firmware (up to milanpi-sp3_1.0.0.7)vulnerable

amd · epyc_7443p

amd · epyc_7453_firmware (up to milanpi-sp3_1.0.0.7)vulnerable

amd · epyc_7453

amd · epyc_74f3_firmware (up to milanpi-sp3_1.0.0.7)vulnerable

amd · epyc_74f3

amd · epyc_7513_firmware (up to milanpi-sp3_1.0.0.7)vulnerable

amd · epyc_7513

amd · epyc_7543_firmware (up to milanpi-sp3_1.0.0.7)vulnerable

amd · epyc_7543

amd · epyc_7543p_firmware (up to milanpi-sp3_1.0.0.7)vulnerable

amd · epyc_7543p

amd · epyc_7573x_firmware (up to milanpi-sp3_1.0.0.7)vulnerable

amd · epyc_7573x

amd · epyc_75f3_firmware (up to milanpi-sp3_1.0.0.7)vulnerable

amd · epyc_75f3

amd · epyc_7643_firmware (up to milanpi-sp3_1.0.0.7)vulnerable

amd · epyc_7643

amd · epyc_7663_firmware (up to milanpi-sp3_1.0.0.7)vulnerable

amd · epyc_7663

amd · epyc_7713_firmware (up to milanpi-sp3_1.0.0.7)vulnerable

amd · epyc_7713

amd · epyc_7713p_firmware (up to milanpi-sp3_1.0.0.7)vulnerable

amd · epyc_7713p

amd · epyc_7743_firmware (up to milanpi-sp3_1.0.0.7)vulnerable

amd · epyc_7743

amd · epyc_7763_firmware (up to milanpi-sp3_1.0.0.7)vulnerable

amd · epyc_7763

amd · epyc_7773x_firmware (up to milanpi-sp3_1.0.0.7)vulnerable

amd · epyc_7773x

References (2)

https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032

Vendor Advisory

https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032

Vendor Advisory

KEV Catalog EPSS Scores Vendors All CVEs