CVSS 3.1
5.5 mediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NCVE-2021-46766
Medium (5.5) in amd. EPSS 0.2% chance of exploitation in the next 30 days.
Improper clearing of sensitive data in the ASP Bootloader may expose secret keys to a privileged attacker accessing ASP SRAM, potentially leading to a loss of confidentiality.
Severity
- EPSS
- 0.2% chance of exploitation in the next 30 days; higher than 13% of CVEs (scores of 2026-10-31)
- CWE
- CWE-459
- Published
- Modified
- Record from
- the NVD, synced
Affected
- amd:epyc_9124_firmware
- amd:epyc_9174f_firmware
- amd:epyc_9184x_firmware
- amd:epyc_9224_firmware
- amd:epyc_9254_firmware
- amd:epyc_9274f_firmware
- amd:epyc_9334_firmware
- amd:epyc_9354_firmware
- amd:epyc_9354p_firmware
- amd:epyc_9374f_firmware
- amd:epyc_9384x_firmware
- amd:epyc_9454_firmware
- amd:epyc_9454p_firmware
- amd:epyc_9474f_firmware
- amd:epyc_9534_firmware
- amd:epyc_9554_firmware
- amd:epyc_9554p_firmware
- amd:epyc_9634_firmware
- amd:epyc_9654_firmware
- amd:epyc_9654p_firmware
- amd:epyc_9684x_firmware
- amd:epyc_9734_firmware
- amd:epyc_9754_firmware
- amd:epyc_9754s_firmware
- amd:ryzen_threadripper_pro_3945wx_firmware
- amd:ryzen_threadripper_pro_3955wx_firmware
- amd:ryzen_threadripper_pro_3975wx_firmware
- amd:ryzen_threadripper_pro_3995wx_firmware
References
- https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3002
- https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4002
- https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-5001
- https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3002
- https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4002