CVE-2021-26402
Severity Score
7.1
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Insufficient bounds checking in ASP (AMD Secure Processor) firmware while handling BIOS mailbox commands, may allow an attacker to write partially-controlled data out-of-bounds to SMM or SEV-ES regions which may lead to a potential loss of integrity and availability.
La comprobación de los límites insuficientes en el firmware ASP (AMD Secure Processor) mientras se manejan los comandos del buzón del BIOS puede permitir que un atacante escriba datos parcialmente controlados fuera de los límites de las regiones SMM o SEV-ES, lo que puede provocar una posible pérdida de integridad y disponibilidad.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2021-01-29 CVE Reserved
- 2023-01-10 CVE Published
- 2024-08-02 EPSS Updated
- 2024-08-03 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-787: Out-of-bounds Write
CAPEC
References (1)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032 | 2023-11-07 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Amd Search vendor "Amd" | Epyc 7h12 Firmware Search vendor "Amd" for product "Epyc 7h12 Firmware" | < romepi_1.0.0.c Search vendor "Amd" for product "Epyc 7h12 Firmware" and version " < romepi_1.0.0.c" | - |
Affected
| in | Amd Search vendor "Amd" | Epyc 7h12 Search vendor "Amd" for product "Epyc 7h12" | - | - |
Safe
|
| Amd Search vendor "Amd" | Epyc 7f72 Firmware Search vendor "Amd" for product "Epyc 7f72 Firmware" | < romepi_1.0.0.c Search vendor "Amd" for product "Epyc 7f72 Firmware" and version " < romepi_1.0.0.c" | - |
Affected
| in | Amd Search vendor "Amd" | Epyc 7f72 Search vendor "Amd" for product "Epyc 7f72" | - | - |
Safe
|
| Amd Search vendor "Amd" | Epyc 7f52 Firmware Search vendor "Amd" for product "Epyc 7f52 Firmware" | < romepi_1.0.0.c Search vendor "Amd" for product "Epyc 7f52 Firmware" and version " < romepi_1.0.0.c" | - |
Affected
| in | Amd Search vendor "Amd" | Epyc 7f52 Search vendor "Amd" for product "Epyc 7f52" | - | - |
Safe
|
| Amd Search vendor "Amd" | Epyc 7f32 Firmware Search vendor "Amd" for product "Epyc 7f32 Firmware" | < romepi_1.0.0.c Search vendor "Amd" for product "Epyc 7f32 Firmware" and version " < romepi_1.0.0.c" | - |
Affected
| in | Amd Search vendor "Amd" | Epyc 7f32 Search vendor "Amd" for product "Epyc 7f32" | - | - |
Safe
|
| Amd Search vendor "Amd" | Epyc 7742 Firmware Search vendor "Amd" for product "Epyc 7742 Firmware" | < romepi_1.0.0.c Search vendor "Amd" for product "Epyc 7742 Firmware" and version " < romepi_1.0.0.c" | - |
Affected
| in | Amd Search vendor "Amd" | Epyc 7742 Search vendor "Amd" for product "Epyc 7742" | - | - |
Safe
|
| Amd Search vendor "Amd" | Epyc 7702p Firmware Search vendor "Amd" for product "Epyc 7702p Firmware" | < romepi_1.0.0.c Search vendor "Amd" for product "Epyc 7702p Firmware" and version " < romepi_1.0.0.c" | - |
Affected
| in | Amd Search vendor "Amd" | Epyc 7702p Search vendor "Amd" for product "Epyc 7702p" | - | - |
Safe
|
| Amd Search vendor "Amd" | Epyc 7702 Firmware Search vendor "Amd" for product "Epyc 7702 Firmware" | < romepi_1.0.0.c Search vendor "Amd" for product "Epyc 7702 Firmware" and version " < romepi_1.0.0.c" | - |
Affected
| in | Amd Search vendor "Amd" | Epyc 7702 Search vendor "Amd" for product "Epyc 7702" | - | - |
Safe
|
| Amd Search vendor "Amd" | Epyc 7662 Firmware Search vendor "Amd" for product "Epyc 7662 Firmware" | < romepi_1.0.0.c Search vendor "Amd" for product "Epyc 7662 Firmware" and version " < romepi_1.0.0.c" | - |
Affected
| in | Amd Search vendor "Amd" | Epyc 7662 Search vendor "Amd" for product "Epyc 7662" | - | - |
Safe
|
| Amd Search vendor "Amd" | Epyc 7642 Firmware Search vendor "Amd" for product "Epyc 7642 Firmware" | < romepi_1.0.0.c Search vendor "Amd" for product "Epyc 7642 Firmware" and version " < romepi_1.0.0.c" | - |
Affected
| in | Amd Search vendor "Amd" | Epyc 7642 Search vendor "Amd" for product "Epyc 7642" | - | - |
Safe
|
| Amd Search vendor "Amd" | Epyc 7552 Firmware Search vendor "Amd" for product "Epyc 7552 Firmware" | < romepi_1.0.0.c Search vendor "Amd" for product "Epyc 7552 Firmware" and version " < romepi_1.0.0.c" | - |
Affected
| in | Amd Search vendor "Amd" | Epyc 7552 Search vendor "Amd" for product "Epyc 7552" | - | - |
Safe
|
| Amd Search vendor "Amd" | Epyc 7542 Firmware Search vendor "Amd" for product "Epyc 7542 Firmware" | < romepi_1.0.0.c Search vendor "Amd" for product "Epyc 7542 Firmware" and version " < romepi_1.0.0.c" | - |
Affected
| in | Amd Search vendor "Amd" | Epyc 7542 Search vendor "Amd" for product "Epyc 7542" | - | - |
Safe
|
| Amd Search vendor "Amd" | Epyc 7532 Firmware Search vendor "Amd" for product "Epyc 7532 Firmware" | < romepi_1.0.0.c Search vendor "Amd" for product "Epyc 7532 Firmware" and version " < romepi_1.0.0.c" | - |
Affected
| in | Amd Search vendor "Amd" | Epyc 7532 Search vendor "Amd" for product "Epyc 7532" | - | - |
Safe
|
| Amd Search vendor "Amd" | Epyc 7502p Firmware Search vendor "Amd" for product "Epyc 7502p Firmware" | < romepi_1.0.0.c Search vendor "Amd" for product "Epyc 7502p Firmware" and version " < romepi_1.0.0.c" | - |
Affected
| in | Amd Search vendor "Amd" | Epyc 7502p Search vendor "Amd" for product "Epyc 7502p" | - | - |
Safe
|
| Amd Search vendor "Amd" | Epyc 7502 Firmware Search vendor "Amd" for product "Epyc 7502 Firmware" | < romepi_1.0.0.c Search vendor "Amd" for product "Epyc 7502 Firmware" and version " < romepi_1.0.0.c" | - |
Affected
| in | Amd Search vendor "Amd" | Epyc 7502 Search vendor "Amd" for product "Epyc 7502" | - | - |
Safe
|
| Amd Search vendor "Amd" | Epyc 7452 Firmware Search vendor "Amd" for product "Epyc 7452 Firmware" | < romepi_1.0.0.c Search vendor "Amd" for product "Epyc 7452 Firmware" and version " < romepi_1.0.0.c" | - |
Affected
| in | Amd Search vendor "Amd" | Epyc 7452 Search vendor "Amd" for product "Epyc 7452" | - | - |
Safe
|
| Amd Search vendor "Amd" | Epyc 7402 Firmware Search vendor "Amd" for product "Epyc 7402 Firmware" | < romepi_1.0.0.c Search vendor "Amd" for product "Epyc 7402 Firmware" and version " < romepi_1.0.0.c" | - |
Affected
| in | Amd Search vendor "Amd" | Epyc 7402 Search vendor "Amd" for product "Epyc 7402" | - | - |
Safe
|
| Amd Search vendor "Amd" | Epyc 7402p Firmware Search vendor "Amd" for product "Epyc 7402p Firmware" | < romepi_1.0.0.c Search vendor "Amd" for product "Epyc 7402p Firmware" and version " < romepi_1.0.0.c" | - |
Affected
| in | Amd Search vendor "Amd" | Epyc 7402p Search vendor "Amd" for product "Epyc 7402p" | - | - |
Safe
|
| Amd Search vendor "Amd" | Epyc 7352 Firmware Search vendor "Amd" for product "Epyc 7352 Firmware" | < romepi_1.0.0.c Search vendor "Amd" for product "Epyc 7352 Firmware" and version " < romepi_1.0.0.c" | - |
Affected
| in | Amd Search vendor "Amd" | Epyc 7352 Search vendor "Amd" for product "Epyc 7352" | - | - |
Safe
|
| Amd Search vendor "Amd" | Epyc 7302p Firmware Search vendor "Amd" for product "Epyc 7302p Firmware" | < romepi_1.0.0.c Search vendor "Amd" for product "Epyc 7302p Firmware" and version " < romepi_1.0.0.c" | - |
Affected
| in | Amd Search vendor "Amd" | Epyc 7302p Search vendor "Amd" for product "Epyc 7302p" | - | - |
Safe
|
| Amd Search vendor "Amd" | Epyc 7302 Firmware Search vendor "Amd" for product "Epyc 7302 Firmware" | < romepi_1.0.0.c Search vendor "Amd" for product "Epyc 7302 Firmware" and version " < romepi_1.0.0.c" | - |
Affected
| in | Amd Search vendor "Amd" | Epyc 7302 Search vendor "Amd" for product "Epyc 7302" | - | - |
Safe
|
| Amd Search vendor "Amd" | Epyc 7282 Firmware Search vendor "Amd" for product "Epyc 7282 Firmware" | < romepi_1.0.0.c Search vendor "Amd" for product "Epyc 7282 Firmware" and version " < romepi_1.0.0.c" | - |
Affected
| in | Amd Search vendor "Amd" | Epyc 7282 Search vendor "Amd" for product "Epyc 7282" | - | - |
Safe
|
| Amd Search vendor "Amd" | Epyc 7272 Firmware Search vendor "Amd" for product "Epyc 7272 Firmware" | < romepi_1.0.0.c Search vendor "Amd" for product "Epyc 7272 Firmware" and version " < romepi_1.0.0.c" | - |
Affected
| in | Amd Search vendor "Amd" | Epyc 7272 Search vendor "Amd" for product "Epyc 7272" | - | - |
Safe
|
| Amd Search vendor "Amd" | Epyc 7262 Firmware Search vendor "Amd" for product "Epyc 7262 Firmware" | < romepi_1.0.0.c Search vendor "Amd" for product "Epyc 7262 Firmware" and version " < romepi_1.0.0.c" | - |
Affected
| in | Amd Search vendor "Amd" | Epyc 7262 Search vendor "Amd" for product "Epyc 7262" | - | - |
Safe
|
| Amd Search vendor "Amd" | Epyc 7252 Firmware Search vendor "Amd" for product "Epyc 7252 Firmware" | < romepi_1.0.0.c Search vendor "Amd" for product "Epyc 7252 Firmware" and version " < romepi_1.0.0.c" | - |
Affected
| in | Amd Search vendor "Amd" | Epyc 7252 Search vendor "Amd" for product "Epyc 7252" | - | - |
Safe
|
| Amd Search vendor "Amd" | Epyc 7232p Firmware Search vendor "Amd" for product "Epyc 7232p Firmware" | < romepi_1.0.0.c Search vendor "Amd" for product "Epyc 7232p Firmware" and version " < romepi_1.0.0.c" | - |
Affected
| in | Amd Search vendor "Amd" | Epyc 7232p Search vendor "Amd" for product "Epyc 7232p" | - | - |
Safe
|
| Amd Search vendor "Amd" | Epyc 7002 Firmware Search vendor "Amd" for product "Epyc 7002 Firmware" | < romepi_1.0.0.c Search vendor "Amd" for product "Epyc 7002 Firmware" and version " < romepi_1.0.0.c" | - |
Affected
| in | Amd Search vendor "Amd" | Epyc 7002 Search vendor "Amd" for product "Epyc 7002" | - | - |
Safe
|
| Amd Search vendor "Amd" | Epyc 7003 Firmware Search vendor "Amd" for product "Epyc 7003 Firmware" | < milanpi_1.0.0.4 Search vendor "Amd" for product "Epyc 7003 Firmware" and version " < milanpi_1.0.0.4" | - |
Affected
| in | Amd Search vendor "Amd" | Epyc 7003 Search vendor "Amd" for product "Epyc 7003" | - | - |
Safe
|
| Amd Search vendor "Amd" | Epyc 72f3 Firmware Search vendor "Amd" for product "Epyc 72f3 Firmware" | < milanpi_1.0.0.4 Search vendor "Amd" for product "Epyc 72f3 Firmware" and version " < milanpi_1.0.0.4" | - |
Affected
| in | Amd Search vendor "Amd" | Epyc 72f3 Search vendor "Amd" for product "Epyc 72f3" | - | - |
Safe
|
| Amd Search vendor "Amd" | Epyc 7313 Firmware Search vendor "Amd" for product "Epyc 7313 Firmware" | < milanpi_1.0.0.4 Search vendor "Amd" for product "Epyc 7313 Firmware" and version " < milanpi_1.0.0.4" | - |
Affected
| in | Amd Search vendor "Amd" | Epyc 7313 Search vendor "Amd" for product "Epyc 7313" | - | - |
Safe
|
| Amd Search vendor "Amd" | Epyc 7313p Firmware Search vendor "Amd" for product "Epyc 7313p Firmware" | < milanpi_1.0.0.4 Search vendor "Amd" for product "Epyc 7313p Firmware" and version " < milanpi_1.0.0.4" | - |
Affected
| in | Amd Search vendor "Amd" | Epyc 7313p Search vendor "Amd" for product "Epyc 7313p" | - | - |
Safe
|
| Amd Search vendor "Amd" | Epyc 7343 Firmware Search vendor "Amd" for product "Epyc 7343 Firmware" | < milanpi_1.0.0.4 Search vendor "Amd" for product "Epyc 7343 Firmware" and version " < milanpi_1.0.0.4" | - |
Affected
| in | Amd Search vendor "Amd" | Epyc 7343 Search vendor "Amd" for product "Epyc 7343" | - | - |
Safe
|
| Amd Search vendor "Amd" | Epyc 7373x Firmware Search vendor "Amd" for product "Epyc 7373x Firmware" | < milanpi_1.0.0.4 Search vendor "Amd" for product "Epyc 7373x Firmware" and version " < milanpi_1.0.0.4" | - |
Affected
| in | Amd Search vendor "Amd" | Epyc 7373x Search vendor "Amd" for product "Epyc 7373x" | - | - |
Safe
|
| Amd Search vendor "Amd" | Epyc 73f3 Firmware Search vendor "Amd" for product "Epyc 73f3 Firmware" | < milanpi_1.0.0.4 Search vendor "Amd" for product "Epyc 73f3 Firmware" and version " < milanpi_1.0.0.4" | - |
Affected
| in | Amd Search vendor "Amd" | Epyc 73f3 Search vendor "Amd" for product "Epyc 73f3" | - | - |
Safe
|
| Amd Search vendor "Amd" | Epyc 7413 Firmware Search vendor "Amd" for product "Epyc 7413 Firmware" | < milanpi_1.0.0.4 Search vendor "Amd" for product "Epyc 7413 Firmware" and version " < milanpi_1.0.0.4" | - |
Affected
| in | Amd Search vendor "Amd" | Epyc 7413 Search vendor "Amd" for product "Epyc 7413" | - | - |
Safe
|
| Amd Search vendor "Amd" | Epyc 7443 Firmware Search vendor "Amd" for product "Epyc 7443 Firmware" | < milanpi_1.0.0.4 Search vendor "Amd" for product "Epyc 7443 Firmware" and version " < milanpi_1.0.0.4" | - |
Affected
| in | Amd Search vendor "Amd" | Epyc 7443 Search vendor "Amd" for product "Epyc 7443" | - | - |
Safe
|
| Amd Search vendor "Amd" | Epyc 7443p Firmware Search vendor "Amd" for product "Epyc 7443p Firmware" | < milanpi_1.0.0.4 Search vendor "Amd" for product "Epyc 7443p Firmware" and version " < milanpi_1.0.0.4" | - |
Affected
| in | Amd Search vendor "Amd" | Epyc 7443p Search vendor "Amd" for product "Epyc 7443p" | - | - |
Safe
|
| Amd Search vendor "Amd" | Epyc 7453 Firmware Search vendor "Amd" for product "Epyc 7453 Firmware" | < milanpi_1.0.0.4 Search vendor "Amd" for product "Epyc 7453 Firmware" and version " < milanpi_1.0.0.4" | - |
Affected
| in | Amd Search vendor "Amd" | Epyc 7453 Search vendor "Amd" for product "Epyc 7453" | - | - |
Safe
|
| Amd Search vendor "Amd" | Epyc 74f3 Firmware Search vendor "Amd" for product "Epyc 74f3 Firmware" | < milanpi_1.0.0.4 Search vendor "Amd" for product "Epyc 74f3 Firmware" and version " < milanpi_1.0.0.4" | - |
Affected
| in | Amd Search vendor "Amd" | Epyc 74f3 Search vendor "Amd" for product "Epyc 74f3" | - | - |
Safe
|
| Amd Search vendor "Amd" | Epyc 7513 Firmware Search vendor "Amd" for product "Epyc 7513 Firmware" | < milanpi_1.0.0.4 Search vendor "Amd" for product "Epyc 7513 Firmware" and version " < milanpi_1.0.0.4" | - |
Affected
| in | Amd Search vendor "Amd" | Epyc 7513 Search vendor "Amd" for product "Epyc 7513" | - | - |
Safe
|
| Amd Search vendor "Amd" | Epyc 7543 Firmware Search vendor "Amd" for product "Epyc 7543 Firmware" | < milanpi_1.0.0.4 Search vendor "Amd" for product "Epyc 7543 Firmware" and version " < milanpi_1.0.0.4" | - |
Affected
| in | Amd Search vendor "Amd" | Epyc 7543 Search vendor "Amd" for product "Epyc 7543" | - | - |
Safe
|
| Amd Search vendor "Amd" | Epyc 7543p Firmware Search vendor "Amd" for product "Epyc 7543p Firmware" | < milanpi_1.0.0.4 Search vendor "Amd" for product "Epyc 7543p Firmware" and version " < milanpi_1.0.0.4" | - |
Affected
| in | Amd Search vendor "Amd" | Epyc 7543p Search vendor "Amd" for product "Epyc 7543p" | - | - |
Safe
|
| Amd Search vendor "Amd" | Epyc 7573x Firmware Search vendor "Amd" for product "Epyc 7573x Firmware" | < milanpi_1.0.0.4 Search vendor "Amd" for product "Epyc 7573x Firmware" and version " < milanpi_1.0.0.4" | - |
Affected
| in | Amd Search vendor "Amd" | Epyc 7573x Search vendor "Amd" for product "Epyc 7573x" | - | - |
Safe
|
| Amd Search vendor "Amd" | Epyc 75f3 Firmware Search vendor "Amd" for product "Epyc 75f3 Firmware" | < milanpi_1.0.0.4 Search vendor "Amd" for product "Epyc 75f3 Firmware" and version " < milanpi_1.0.0.4" | - |
Affected
| in | Amd Search vendor "Amd" | Epyc 75f3 Search vendor "Amd" for product "Epyc 75f3" | - | - |
Safe
|
| Amd Search vendor "Amd" | Epyc 7643 Firmware Search vendor "Amd" for product "Epyc 7643 Firmware" | < milanpi_1.0.0.4 Search vendor "Amd" for product "Epyc 7643 Firmware" and version " < milanpi_1.0.0.4" | - |
Affected
| in | Amd Search vendor "Amd" | Epyc 7643 Search vendor "Amd" for product "Epyc 7643" | - | - |
Safe
|
| Amd Search vendor "Amd" | Epyc 7663 Firmware Search vendor "Amd" for product "Epyc 7663 Firmware" | < milanpi_1.0.0.4 Search vendor "Amd" for product "Epyc 7663 Firmware" and version " < milanpi_1.0.0.4" | - |
Affected
| in | Amd Search vendor "Amd" | Epyc 7663 Search vendor "Amd" for product "Epyc 7663" | - | - |
Safe
|
| Amd Search vendor "Amd" | Epyc 7713 Firmware Search vendor "Amd" for product "Epyc 7713 Firmware" | < milanpi_1.0.0.4 Search vendor "Amd" for product "Epyc 7713 Firmware" and version " < milanpi_1.0.0.4" | - |
Affected
| in | Amd Search vendor "Amd" | Epyc 7713 Search vendor "Amd" for product "Epyc 7713" | - | - |
Safe
|
| Amd Search vendor "Amd" | Epyc 7713p Firmware Search vendor "Amd" for product "Epyc 7713p Firmware" | < milanpi_1.0.0.4 Search vendor "Amd" for product "Epyc 7713p Firmware" and version " < milanpi_1.0.0.4" | - |
Affected
| in | Amd Search vendor "Amd" | Epyc 7713p Search vendor "Amd" for product "Epyc 7713p" | - | - |
Safe
|
| Amd Search vendor "Amd" | Epyc 7743 Firmware Search vendor "Amd" for product "Epyc 7743 Firmware" | < milanpi_1.0.0.4 Search vendor "Amd" for product "Epyc 7743 Firmware" and version " < milanpi_1.0.0.4" | - |
Affected
| in | Amd Search vendor "Amd" | Epyc 7743 Search vendor "Amd" for product "Epyc 7743" | - | - |
Safe
|
| Amd Search vendor "Amd" | Epyc 7763 Firmware Search vendor "Amd" for product "Epyc 7763 Firmware" | < milanpi_1.0.0.4 Search vendor "Amd" for product "Epyc 7763 Firmware" and version " < milanpi_1.0.0.4" | - |
Affected
| in | Amd Search vendor "Amd" | Epyc 7763 Search vendor "Amd" for product "Epyc 7763" | - | - |
Safe
|
| Amd Search vendor "Amd" | Epyc 7773x Firmware Search vendor "Amd" for product "Epyc 7773x Firmware" | < milanpi_1.0.0.4 Search vendor "Amd" for product "Epyc 7773x Firmware" and version " < milanpi_1.0.0.4" | - |
Affected
| in | Amd Search vendor "Amd" | Epyc 7773x Search vendor "Amd" for product "Epyc 7773x" | - | - |
Safe
|