CVE-2021-26370

· HIGHModified

← All CVEs

CVSS v3.1

7.1

EPSS

0.22%

Published

May 10, 2022

Modified

Nov 21, 2024

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Improper validation of destination address in SVC_LOAD_FW_IMAGE_BY_INSTANCE and SVC_LOAD_BINARY_BY_ATTRIB in a malicious UApp or ABL may allow an attacker to overwrite arbitrary bootloader memory with SPI ROM contents resulting in a loss of integrity and availability.

CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Weaknesses (CWE)

CWE-20CWE-20

Affected Products (98)

amd · epyc_7763_firmware (up to milanpi-sp3_1.0.0.4)vulnerable

amd · epyc_7763

amd · epyc_7713p_firmware (up to milanpi-sp3_1.0.0.4)vulnerable

amd · epyc_7713p

amd · epyc_7713_firmware (up to milanpi-sp3_1.0.0.4)vulnerable

amd · epyc_7713

amd · epyc_7663_firmware (up to milanpi-sp3_1.0.0.4)vulnerable

amd · epyc_7663

amd · epyc_7643_firmware (up to milanpi-sp3_1.0.0.4)vulnerable

amd · epyc_7643

amd · epyc_75f3_firmware (up to milanpi-sp3_1.0.0.4)vulnerable

amd · epyc_75f3

amd · epyc_7543p_firmware (up to milanpi-sp3_1.0.0.4)vulnerable

amd · epyc_7543p

amd · epyc_7543_firmware (up to milanpi-sp3_1.0.0.4)vulnerable

amd · epyc_7543

amd · epyc_7513_firmware (up to milanpi-sp3_1.0.0.4)vulnerable

amd · epyc_7513

amd · epyc_7453_firmware (up to milanpi-sp3_1.0.0.4)vulnerable

amd · epyc_7453

amd · epyc_74f3_firmware (up to milanpi-sp3_1.0.0.4)vulnerable

amd · epyc_74f3

amd · epyc_7443p_firmware (up to milanpi-sp3_1.0.0.4)vulnerable

amd · epyc_7443p

amd · epyc_7443_firmware (up to milanpi-sp3_1.0.0.4)vulnerable

amd · epyc_7443

amd · epyc_7413_firmware (up to milanpi-sp3_1.0.0.4)vulnerable

amd · epyc_7413

amd · epyc_73f3_firmware (up to milanpi-sp3_1.0.0.4)vulnerable

amd · epyc_73f3

amd · epyc_7343_firmware (up to milanpi-sp3_1.0.0.4)vulnerable

amd · epyc_7343

amd · epyc_7313p_firmware (up to milanpi-sp3_1.0.0.4)vulnerable

amd · epyc_7313p

amd · epyc_7313_firmware (up to milanpi-sp3_1.0.0.4)vulnerable

amd · epyc_7313

amd · epyc_72f3_firmware (up to milanpi-sp3_1.0.0.4)vulnerable

amd · epyc_72f3

amd · epyc_7773x_firmware (up to milanpi-sp3_1.0.0.4)vulnerable

amd · epyc_7773x

amd · epyc_7473x_firmware (up to milanpi-sp3_1.0.0.4)vulnerable

amd · epyc_7473x

amd · epyc_7573x_firmware (up to milanpi-sp3_1.0.0.4)vulnerable

amd · epyc_7573x

amd · epyc_7373x_firmware (up to milanpi-sp3_1.0.0.4)vulnerable

amd · epyc_7373x

amd · epyc_7002_firmware (up to romepi-sp3_1.0.0.c)vulnerable

amd · epyc_7002

amd · epyc_7232p_firmware (up to romepi-sp3_1.0.0.c)vulnerable

amd · epyc_7232p

...and 48 more

References (2)

https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1021

Vendor Advisory

https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1021

Vendor Advisory

KEV Catalog EPSS Scores Vendors All CVEs