CVE-2021-46768

Insufficient input validation in SEV firmware may allow an attacker to perform out-of-bounds memory reads within the ASP boot loader, potentially leading to a denial of service.

CVSS v3 5.5 MEDIUM

5.5^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032	Vendor Advisory

Configurations

Configuration 1 (hide)

AND

cpe:2.3:o:amd:romepi_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:amd:romepi:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND

cpe:2.3:o:amd:milanpi_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:amd:milanpi:-:*:*:*:*:*:*:*

History

No history.

Information

Published : 2023-01-11 08:15

Updated : 2023-11-07 03:40

NVD link : CVE-2021-46768

Mitre link : CVE-2021-46768

CVE.ORG link : CVE-2021-46768

JSON object : View

Products Affected

amd

romepi_firmware
romepi
milanpi
milanpi_firmware

CWE

CWE-125

Out-of-bounds Read

{"id": "CVE-2021-46768", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.5, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 1.8}]}, "published": "2023-01-11T08:15:13.163", "references": [{"url": "https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032", "tags": ["Vendor Advisory"], "source": "psirt@amd.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-125"}]}], "descriptions": [{"lang": "en", "value": "Insufficient input validation in SEV firmware may allow an attacker to perform out-of-bounds memory reads within the ASP boot loader, potentially leading to a denial of service.\n"}, {"lang": "es", "value": "Una validaci\u00f3n de entrada insuficiente en el firmware SEV puede permitir que un atacante realice lecturas de memoria fuera de los l\u00edmites dentro del cargador de arranque ASP, lo que podr\u00eda provocar una denegaci\u00f3n de servicio."}], "lastModified": "2023-11-07T03:40:03.620", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:amd:romepi_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "88ECFD2A-170F-46B8-9013-4605ED25626F", "versionEndExcluding": "1.0.0.d"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:amd:romepi:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "B936879F-731E-4991-ACBB-16643F629B41"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:amd:milanpi_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "46D6FD1B-4833-425D-A39E-2FC0A769C036", "versionEndExcluding": "1.0.0.5"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:amd:milanpi:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "1F64A4AA-A66B-4B2E-B8F1-F332E3945903"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "psirt@amd.com"}