Medium severity · published May 11, 2022
CVE-2021-26347
Failure to validate the integer operand in ASP (AMD Secure Processor) bootloader may allow an attacker to introduce an integer overflow in the L2 directory table in SPI flash…
4.7
CVSS
0.2%
EPSS
No
On KEV
Description
Failure to validate the integer operand in ASP (AMD Secure Processor) bootloader may allow an attacker to introduce an integer overflow in the L2 directory table in SPI flash resulting in a potential denial of service.
CVSS vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack vector
Local
Complexity
High
Privileges
Low
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 9% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
E7
Epyc 7002 Firmware · Amd
before romepi-sp3_1.0.0.d · source: NVD
E7
Epyc 7232p Firmware · Amd
before romepi-sp3_1.0.0.d · source: NVD
E7
Epyc 7252 Firmware · Amd
before romepi-sp3_1.0.0.d · source: NVD
E7
Epyc 7262 Firmware · Amd
before romepi-sp3_1.0.0.d · source: NVD
E7
Epyc 7272 Firmware · Amd
before romepi-sp3_1.0.0.d · source: NVD
E7
Epyc 7282 Firmware · Amd
before romepi-sp3_1.0.0.d · source: NVD
E7
Epyc 72f3 Firmware · Amd
before milanpi-sp3_1.0.0.7 · source: NVD
E7
Epyc 7302 Firmware · Amd
before romepi-sp3_1.0.0.d · source: NVD
E7
Epyc 7302p Firmware · Amd
before romepi-sp3_1.0.0.d · source: NVD
E7
Epyc 7313 Firmware · Amd
before milanpi-sp3_1.0.0.7 · source: NVD
E7
Epyc 7313p Firmware · Amd
before milanpi-sp3_1.0.0.7 · source: NVD
E7
Epyc 7343 Firmware · Amd
before milanpi-sp3_1.0.0.7 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2021-26347
CVE.org
https://www.cve.org/CVERecord?id=CVE-2021-26347
www.amd.com
https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1031
More from Epyc 7002 Firmware
7.8
CVE-2021-26398
Insufficient input validation in SYS_KEY_DERIVE system call in a compromised user application or ABL may allow an attacker to corrupt ASP (AMD Secure Processor) OS memory which…
7.8
CVE-2021-26316
Failure to validate the communication buffer and communication service in the BIOS may allow an attacker to tamper with the buffer resulting in potential SMM (System Management…
7.8
CVE-2021-26335
Improper input and range checking in the AMD Secure Processor (ASP) boot loader image header may allow an attacker to use attacker-controlled values prior to signature validation…
7.8
CVE-2021-26331
AMD System Management Unit (SMU) contains a potential issue where a malicious user may be able to manipulate mailbox entries leading to arbitrary code execution
7.8
CVE-2020-12961
A potential vulnerability exists in AMD Platform Security Processor (PSP) that may allow an attacker to zero any privileged register on the System Management Network which may…