NetSight
medium5.5

CVE-2021-26327

Insufficient validation of guest context in the SNP Firmware could lead to a potential loss of guest confidentiality.

Impact

Insufficient validation of guest context in the SNP Firmware could lead to a potential loss of guest confidentiality.

Affected products

VendorProductAffected versions
AmdEpyc 7003 Firmware
before milanpi-sp3_1.0.0.4
AmdEpyc 72f3 Firmware
before milanpi-sp3_1.0.0.4
AmdEpyc 7313 Firmware
before milanpi-sp3_1.0.0.4
AmdEpyc 7313p Firmware
before milanpi-sp3_1.0.0.4
AmdEpyc 7343 Firmware
before milanpi-sp3_1.0.0.4
AmdEpyc 73f3 Firmware
before milanpi-sp3_1.0.0.4
AmdEpyc 7413 Firmware
before milanpi-sp3_1.0.0.4
AmdEpyc 7443 Firmware
before milanpi-sp3_1.0.0.4
AmdEpyc 7443p Firmware
before milanpi-sp3_1.0.0.4
AmdEpyc 7453 Firmware
before milanpi-sp3_1.0.0.4
AmdEpyc 74f3 Firmware
before milanpi-sp3_1.0.0.4
AmdEpyc 7513 Firmware
before milanpi-sp3_1.0.0.4

Weakness classification

References