CVE-2021-39298: medium-severity vulnerability in AMD 2nd Gen EPYC
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 6.5epss 0.4%
A potential vulnerability in AMD System Management Mode (SMM) interrupt handler may allow an attacker with high privileges to access the SMM resulting in arbitrary code execution which could be used by malicious actors to bypass security mechanisms provided in the UEFI firmware.
CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
Affected products
AMD · 2nd Gen EPYCAMD · 3rd Gen EPYCAMD · Ryzen 2000 SeriesAMD · Ryzen 3000 SeriesAMD · Ryzen 5000 SeriesRelated CVEs — AMD 2nd Gen EPYC
In the same product, most dangerous first.