CVE-2021-26346
CVE-2021-26346
Vexday Risk Score
13Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 5.5EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
10 Jan 2023Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
Failure to validate the integer operand in ASP (AMD Secure Processor) bootloader may allow an attacker to introduce an integer overflow in the L2 directory table in SPI flash resulting in a potential denial of service.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Affected products
AMD · Ryzen 5000 SeriesWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →