CVE-2021-26315CWE-345

CVE-2021-26315: vulnerability in AMD 3rd Gen AMD EPYC™

Published · Updated

Follow this CVE+ Monitor 3rd Gen AMD EPYC™

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.2%
When the AMD Platform Security Processor (PSP) boot rom loads, authenticates, and subsequently decrypts an encrypted FW, due to insufficient verification of the integrity of decrypted image, arbitrary code may be executed in the PSP when encrypted firmware images are used.
Affected products
AMD · 3rd Gen AMD EPYC™
Related CVEs — AMD 3rd Gen AMD EPYC™

In the same product, most dangerous first.

CVE-2021-26322—CVE-2021-26322EPSS 1.0%CVE-2021-26338—CVE-2021-26338EPSS 0.9%CVE-2023-20520CRITICALCVE-2023-20520EPSS 0.8%CVE-2021-46769HIGHCVE-2021-46769EPSS 0.8%CVE-2021-26379CRITICALCVE-2021-26379EPSS 0.7%CVE-2021-46764HIGHCVE-2021-46764EPSS 0.6%