CVE-2021-26403 | Severity.io

Description

Insufficient checks in SEV may lead to a malicious hypervisor disclosing the launch secret potentially resulting in compromise of VM confidentiality.

Related CPE's

epyc_7001_firmware

Vulnerable

epyc_7251_firmware

Vulnerable

epyc_7261_firmware

Vulnerable

epyc_7281_firmware

Vulnerable

epyc_7301_firmware

Vulnerable

epyc_7351_firmware

Vulnerable

epyc_7351p_firmware

Vulnerable

epyc_7371_firmware

Vulnerable

epyc_7401_firmware

Vulnerable

epyc_7401p_firmware

Vulnerable

epyc_7451_firmware

Vulnerable

epyc_7501_firmware

Vulnerable

epyc_7551_firmware

Vulnerable

epyc_7551p_firmware

Vulnerable

epyc_7601_firmware

Vulnerable

epyc_7002_firmware

Vulnerable

epyc_7232p_firmware

Vulnerable

epyc_7252_firmware

Vulnerable

epyc_7262_firmware

Vulnerable

epyc_7272_firmware

Vulnerable

epyc_7282_firmware

Vulnerable

epyc_7302_firmware

Vulnerable

epyc_7302p_firmware

Vulnerable

epyc_7352_firmware

Vulnerable

epyc_7402_firmware

Vulnerable

epyc_7402p_firmware

Vulnerable

epyc_7452_firmware

Vulnerable

epyc_7502_firmware

Vulnerable

epyc_7502p_firmware

Vulnerable

epyc_7532_firmware

Vulnerable

epyc_7542_firmware

Vulnerable

epyc_7552_firmware

Vulnerable

epyc_7642_firmware

Vulnerable

epyc_7662_firmware

Vulnerable

epyc_7702_firmware

Vulnerable

epyc_7702p_firmware

Vulnerable

epyc_7742_firmware

Vulnerable

epyc_7f32_firmware

Vulnerable

epyc_7f52_firmware

Vulnerable

epyc_7f72_firmware

Vulnerable

epyc_7h12_firmware

Vulnerable

References

https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032

Vendor Advisory

Weaknesses

[email protected]

Primary

NVD-CWE-noinfo

CVSS impact metrics

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

6.5 · Medium

CVSS V3.1
CVSS V3.0
CVSS V2.0

Information

Source identifier

[email protected]

Vulnerability status

Modified

Published

2023-01-11T08:15:11.590

1 year ago

Last modified

2023-11-07T03:31:44.397

8 months ago