CVE-2024-21981
Severity Score
5.7
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
Track*
*SSVC
Descriptions
Improper key usage control in AMD Secure Processor
(ASP) may allow an attacker with local access who has gained arbitrary code
execution privilege in ASP to
extract ASP cryptographic keys, potentially resulting in loss of
confidentiality and integrity.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:Track*
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2024-01-03 CVE Reserved
- 2024-08-13 CVE Published
- 2024-08-14 EPSS Updated
- 2024-08-15 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-639: Authorization Bypass Through User-Controlled Key
CAPEC
References (1)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3003.html | 2024-08-13 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| AMD Search vendor "AMD" | AMD EPYC™ 7002 Series Processors Search vendor "AMD" for product "AMD EPYC™ 7002 Series Processors" | <= Search vendor "AMD" for product "AMD EPYC™ 7002 Series Processors" and version " <= " | en |
Affected
| ||||||
| AMD Search vendor "AMD" | AMD EPYC™ 7003 Series Processors Search vendor "AMD" for product "AMD EPYC™ 7003 Series Processors" | <= Search vendor "AMD" for product "AMD EPYC™ 7003 Series Processors" and version " <= " | en |
Affected
| ||||||
| AMD Search vendor "AMD" | AMD Ryzen™ 3000 Series Desktop Processors Search vendor "AMD" for product "AMD Ryzen™ 3000 Series Desktop Processors" | <= Search vendor "AMD" for product "AMD Ryzen™ 3000 Series Desktop Processors" and version " <= " | en |
Affected
| ||||||
| AMD Search vendor "AMD" | AMD Ryzen™ 5000 Series Desktop Processors Search vendor "AMD" for product "AMD Ryzen™ 5000 Series Desktop Processors" | <= Search vendor "AMD" for product "AMD Ryzen™ 5000 Series Desktop Processors" and version " <= " | en |
Affected
| ||||||
| AMD Search vendor "AMD" | AMD Ryzen™ 5000 Series Desktop Processor With Radeon™ Graphics Search vendor "AMD" for product "AMD Ryzen™ 5000 Series Desktop Processor With Radeon™ Graphics" | <= Search vendor "AMD" for product "AMD Ryzen™ 5000 Series Desktop Processor With Radeon™ Graphics" and version " <= " | en |
Affected
| ||||||
| AMD Search vendor "AMD" | AMD Athlon™ 3000 Series Desktop Processors With Radeon™ Graphics Search vendor "AMD" for product "AMD Athlon™ 3000 Series Desktop Processors With Radeon™ Graphics" | <= Search vendor "AMD" for product "AMD Athlon™ 3000 Series Desktop Processors With Radeon™ Graphics" and version " <= " | en |
Affected
| ||||||
| AMD Search vendor "AMD" | AMD Ryzen™ 4000 Series Desktop Processors With Radeon™ Graphics Search vendor "AMD" for product "AMD Ryzen™ 4000 Series Desktop Processors With Radeon™ Graphics" | <= Search vendor "AMD" for product "AMD Ryzen™ 4000 Series Desktop Processors With Radeon™ Graphics" and version " <= " | en |
Affected
| ||||||
| AMD Search vendor "AMD" | AMD Ryzen™ Threadripper™ 3000 Series Processors Search vendor "AMD" for product "AMD Ryzen™ Threadripper™ 3000 Series Processors" | <= Search vendor "AMD" for product "AMD Ryzen™ Threadripper™ 3000 Series Processors" and version " <= " | en |
Affected
| ||||||
| AMD Search vendor "AMD" | AMD Ryzen™ Threadripper™ PRO 3000WX Series Processors Search vendor "AMD" for product "AMD Ryzen™ Threadripper™ PRO 3000WX Series Processors" | <= Search vendor "AMD" for product "AMD Ryzen™ Threadripper™ PRO 3000WX Series Processors" and version " <= " | en |
Affected
| ||||||
| AMD Search vendor "AMD" | AMD Ryzen™ Threadripper™ PRO 5000WX Processors Search vendor "AMD" for product "AMD Ryzen™ Threadripper™ PRO 5000WX Processors" | <= Search vendor "AMD" for product "AMD Ryzen™ Threadripper™ PRO 5000WX Processors" and version " <= " | en |
Affected
| ||||||
| AMD Search vendor "AMD" | AMD Athlon™ 3000 Series Mobile Processors With Radeon™ Graphics Search vendor "AMD" for product "AMD Athlon™ 3000 Series Mobile Processors With Radeon™ Graphics" | <= Search vendor "AMD" for product "AMD Athlon™ 3000 Series Mobile Processors With Radeon™ Graphics" and version " <= " | en |
Affected
| ||||||
| AMD Search vendor "AMD" | AMD Athlon™ 3000 Series Mobile Processors With Radeon™ Graphics Search vendor "AMD" for product "AMD Athlon™ 3000 Series Mobile Processors With Radeon™ Graphics" | <= Search vendor "AMD" for product "AMD Athlon™ 3000 Series Mobile Processors With Radeon™ Graphics" and version " <= " | en |
Affected
| ||||||
| AMD Search vendor "AMD" | AMD Ryzen™ 3000 Series Mobile Processor With Radeon™ Graphics Search vendor "AMD" for product "AMD Ryzen™ 3000 Series Mobile Processor With Radeon™ Graphics" | <= Search vendor "AMD" for product "AMD Ryzen™ 3000 Series Mobile Processor With Radeon™ Graphics" and version " <= " | en |
Affected
| ||||||
| AMD Search vendor "AMD" | AMD EPYC™ Embedded 3000 Series Processors Search vendor "AMD" for product "AMD EPYC™ Embedded 3000 Series Processors" | <= Search vendor "AMD" for product "AMD EPYC™ Embedded 3000 Series Processors" and version " <= " | en |
Affected
| ||||||
| AMD Search vendor "AMD" | AMD EPYC™ Embedded 7002 Series Processors Search vendor "AMD" for product "AMD EPYC™ Embedded 7002 Series Processors" | <= Search vendor "AMD" for product "AMD EPYC™ Embedded 7002 Series Processors" and version " <= " | en |
Affected
| ||||||
| AMD Search vendor "AMD" | AMD EPYC™ Embedded 7003 Series Processors Search vendor "AMD" for product "AMD EPYC™ Embedded 7003 Series Processors" | <= Search vendor "AMD" for product "AMD EPYC™ Embedded 7003 Series Processors" and version " <= " | en |
Affected
| ||||||
| AMD Search vendor "AMD" | AMD Ryzen™ Embedded R1000 Series Processors Search vendor "AMD" for product "AMD Ryzen™ Embedded R1000 Series Processors" | <= Search vendor "AMD" for product "AMD Ryzen™ Embedded R1000 Series Processors" and version " <= " | en |
Affected
| ||||||
| AMD Search vendor "AMD" | AMD Ryzen™ Embedded R2000 Series Processors Search vendor "AMD" for product "AMD Ryzen™ Embedded R2000 Series Processors" | <= Search vendor "AMD" for product "AMD Ryzen™ Embedded R2000 Series Processors" and version " <= " | en |
Affected
| ||||||
| AMD Search vendor "AMD" | AMD Ryzen™ Embedded 5000 Series Processors Search vendor "AMD" for product "AMD Ryzen™ Embedded 5000 Series Processors" | <= Search vendor "AMD" for product "AMD Ryzen™ Embedded 5000 Series Processors" and version " <= " | en |
Affected
| ||||||
| AMD Search vendor "AMD" | AMD Ryzen™ Embedded V1000 Series Processors Search vendor "AMD" for product "AMD Ryzen™ Embedded V1000 Series Processors" | <= Search vendor "AMD" for product "AMD Ryzen™ Embedded V1000 Series Processors" and version " <= " | en |
Affected
| ||||||