NetSight
high7.8

CVE-2021-26353

Failure to validate inputs in SMM may allow an attacker to create a mishandled error leaving the DRTM UApp in a partially initialized state potentially resulti…

Impact

Failure to validate inputs in SMM may allow an attacker to create a mishandled error leaving the DRTM UApp in a partially initialized state potentially resulting in loss of memory integrity.

Affected products

VendorProductAffected versions
AmdEpyc 7763 Firmware
before milanpi-sp3_1.0.0.4
AmdEpyc 7713p Firmware
before milanpi-sp3_1.0.0.4
AmdEpyc 7713 Firmware
before milanpi-sp3_1.0.0.4
AmdEpyc 7663 Firmware
before milanpi-sp3_1.0.0.4
AmdEpyc 7643 Firmware
before milanpi-sp3_1.0.0.4
AmdEpyc 75f3 Firmware
before milanpi-sp3_1.0.0.4
AmdEpyc 7543p Firmware
before milanpi-sp3_1.0.0.4
AmdEpyc 7543 Firmware
before milanpi-sp3_1.0.0.4
AmdEpyc 7513 Firmware
before milanpi-sp3_1.0.0.4
AmdEpyc 7453 Firmware
before milanpi-sp3_1.0.0.4
AmdEpyc 74f3 Firmware
before milanpi-sp3_1.0.0.4
AmdEpyc 7443p Firmware
before milanpi-sp3_1.0.0.4

Weakness classification

References