low2.5
CVE-2021-46766
Improper clearing of sensitive data in the ASP Bootloader may expose secret keys to a privileged attacker accessing ASP SRAM, potentially leading to a loss of …
Impact
Improper clearing of sensitive data in the ASP Bootloader may expose secret keys to a privileged attacker accessing ASP SRAM, potentially leading to a loss of confidentiality.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Amd | Epyc 9654p Firmware | before genoapi_1.0.0.4 |
| Amd | Epyc 9654 Firmware | before genoapi_1.0.0.4 |
| Amd | Epyc 9634 Firmware | before genoapi_1.0.0.4 |
| Amd | Epyc 9554p Firmware | before genoapi_1.0.0.4 |
| Amd | Epyc 9554 Firmware | before genoapi_1.0.0.4 |
| Amd | Epyc 9534 Firmware | before genoapi_1.0.0.4 |
| Amd | Epyc 9474f Firmware | before genoapi_1.0.0.4 |
| Amd | Epyc 9454p Firmware | before genoapi_1.0.0.4 |
| Amd | Epyc 9454 Firmware | before genoapi_1.0.0.4 |
| Amd | Epyc 9374f Firmware | before genoapi_1.0.0.4 |
| Amd | Epyc 9354p Firmware | before genoapi_1.0.0.4 |
| Amd | Epyc 9354 Firmware | before genoapi_1.0.0.4 |
Weakness classification
References
- NVD record
- CVE.org record
- https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3002
- https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4002
- https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-5001
- https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3002
- https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4002
- https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-5001