ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2021-26408

—
CVSS 3.1
7.1 high
EPSS
<1%p18
Published
()
Modified
Description

Insufficient validation of elliptic curve points in SEV-legacy firmware may compromise SEV-legacy guest migration potentially resulting in loss of guest's integrity or confidentiality.

Vendors
amd
Products
epyc 7002 firmware, epyc 7001 firmware, epyc 7232p firmware, epyc 7252 firmware, epyc 7262 firmware, epyc 7272 firmware, epyc 7282 firmware, epyc 7302 firmware, epyc 7302p firmware, epyc 7352 firmware, epyc 7402 firmware, epyc 7402p firmware
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news

No ingested article mentions this CVE yet.