Description
Improper clearing of sensitive data in the ASP Bootloader may expose secret keys to a privileged attacker accessing ASP SRAM, potentially leading to a loss of confidentiality.
Published: 2023-11-14
Score: 2.5 Low
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

No analysis available yet.

Remediation

No remediation available yet.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2021-33422 Improper clearing of sensitive data in the ASP Bootloader may expose secret keys to a privileged attacker accessing ASP SRAM, potentially leading to a loss of confidentiality.
History

No history.

Subscriptions

Amd Epyc 9124 Epyc 9124 Firmware Epyc 9174f Epyc 9174f Firmware Epyc 9184x Epyc 9184x Firmware Epyc 9224 Epyc 9224 Firmware Epyc 9254 Epyc 9254 Firmware Epyc 9274f Epyc 9274f Firmware Epyc 9334 Epyc 9334 Firmware Epyc 9354 Epyc 9354 Firmware Epyc 9354p Epyc 9354p Firmware Epyc 9374f Epyc 9374f Firmware Epyc 9384x Epyc 9384x Firmware Epyc 9454 Epyc 9454 Firmware Epyc 9454p Epyc 9454p Firmware Epyc 9474f Epyc 9474f Firmware Epyc 9534 Epyc 9534 Firmware Epyc 9554 Epyc 9554 Firmware Epyc 9554p Epyc 9554p Firmware Epyc 9634 Epyc 9634 Firmware Epyc 9654 Epyc 9654 Firmware Epyc 9654p Epyc 9654p Firmware Epyc 9684x Epyc 9684x Firmware Epyc 9734 Epyc 9734 Firmware Epyc 9754 Epyc 9754 Firmware Epyc 9754s Epyc 9754s Firmware Ryzen Threadripper Pro 3945wx Ryzen Threadripper Pro 3945wx Firmware Ryzen Threadripper Pro 3955wx Ryzen Threadripper Pro 3955wx Firmware Ryzen Threadripper Pro 3975wx Ryzen Threadripper Pro 3975wx Firmware Ryzen Threadripper Pro 3995wx Ryzen Threadripper Pro 3995wx Firmware
cve-icon MITRE

Status: PUBLISHED

Assigner: AMD

Published:

Updated: 2024-08-04T05:17:42.287Z

Reserved: 2022-03-31T16:50:27.871Z

Link: CVE-2021-46766

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2023-11-14T19:15:10.360

Modified: 2024-11-21T06:34:40.617

Link: CVE-2021-46766

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses