NetSight
high7.8

CVE-2021-46757

Insufficient checking of memory buffer in ASP Secure OS may allow an attacker with a malicious TA to read/write to the ASP Secure OS kernel virtual address spa…

Impact

Insufficient checking of memory buffer in ASP Secure OS may allow an attacker with a malicious TA to read/write to the ASP Secure OS kernel virtual address space potentially leading to privilege escalation.

Affected products

VendorProductAffected versions
AmdRyzen Embedded 5950e Firmware
before embam4pi_1.0.0.0
AmdRyzen Embedded 5900e Firmware
before embam4pi_1.0.0.0
AmdRyzen Embedded 5800e Firmware
before embam4pi_1.0.0.0
AmdRyzen Embedded 5600e Firmware
before embam4pi_1.0.0.0
AmdRyzen Embedded V2516 Firmware
before embeddedpi-fp6_1.0.0.6
AmdRyzen Embedded V2546 Firmware
before embeddedpi-fp6_1.0.0.6
AmdRyzen Embedded V2718 Firmware
before embeddedpi-fp6_1.0.0.6
AmdRyzen Embedded V2748 Firmware
before embeddedpi-fp6_1.0.0.6
AmdRyzen Embedded R2312 Firmware
before embeddedpi-fp6_1.0.0.6
AmdRyzen Embedded R2314 Firmware
before embeddedpi-fp6_1.0.0.6

Weakness classification

References