ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2021-26320

—
CVSS 3.1
5.5 medium
EPSS
<1%p8
Published
()
Modified
Description

Insufficient validation of the AMD SEV Signing Key (ASK) in the SEND_START command in the SEV Firmware may allow a local authenticated attacker to perform a denial of service of the PSP

Vendors
amd
Products
epyc 7601 firmware, epyc 7551p firmware, epyc 7551 firmware, epyc 7501 firmware, epyc 7451 firmware, epyc 7401 firmware, epyc 7371 firmware, epyc 7351p firmware, epyc 7351 firmware, epyc 7301 firmware, epyc 7281 firmware, epyc 7261 firmware
Weakness
CWE-295
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news

No ingested article mentions this CVE yet.