NetSight
medium5.5

CVE-2021-26321

Insufficient ID command validation in the SEV Firmware may allow a local authenticated attacker to perform a denial of service of the PSP.

Impact

Insufficient ID command validation in the SEV Firmware may allow a local authenticated attacker to perform a denial of service of the PSP.

Affected products

VendorProductAffected versions
AmdEpyc 7601 Firmware
before naplespi-sp3_1.0.0.g
AmdEpyc 7551p Firmware
before naplespi-sp3_1.0.0.g
AmdEpyc 7551 Firmware
before naplespi-sp3_1.0.0.g
AmdEpyc 7501 Firmware
before naplespi-sp3_1.0.0.g
AmdEpyc 7451 Firmware
before naplespi-sp3_1.0.0.g
AmdEpyc 7401 Firmware
before naplespi-sp3_1.0.0.g
AmdEpyc 7371 Firmware
before naplespi-sp3_1.0.0.g
AmdEpyc 7351p Firmware
before naplespi-sp3_1.0.0.g
AmdEpyc 7351 Firmware
before naplespi-sp3_1.0.0.g
AmdEpyc 7301 Firmware
before naplespi-sp3_1.0.0.g
AmdEpyc 7281 Firmware
before naplespi-sp3_1.0.0.g
AmdEpyc 7261 Firmware
before naplespi-sp3_1.0.0.g

Weakness classification

References