CVE-2021-26320

Orta

Açıklama

SEV Firmware içindeki SEND_START komutunda AMD SEV Signing Key (ASK) doğrulamasının yetersiz olması, yerel kimliği doğrulanmış bir saldırganın PSP üzerinde hizmet reddi gerçekleştirmesine izin verebilir.

ÖnemOrta
CVSS5.5
İstismar olasılığı—
ÜrünAmd Epyc 7601 Firmware
Yayın16 Kas 2021
İlk görülme16 Kas 2021
Zayıflık türüCWE-295CWE-295

Nasıl düzeltilir

Güncelleyin
  • amd epyc_7601_firmwarenaplespi-sp3_1.0.0.g ya da sonraki bir sürüm
  • amd epyc_7551p_firmwarenaplespi-sp3_1.0.0.g ya da sonraki bir sürüm
  • amd epyc_7551_firmwarenaplespi-sp3_1.0.0.g ya da sonraki bir sürüm
  • amd epyc_7501_firmwarenaplespi-sp3_1.0.0.g ya da sonraki bir sürüm
  • amd epyc_7451_firmwarenaplespi-sp3_1.0.0.g ya da sonraki bir sürüm
  • amd epyc_7401_firmwarenaplespi-sp3_1.0.0.g ya da sonraki bir sürüm
  • amd epyc_7371_firmwarenaplespi-sp3_1.0.0.g ya da sonraki bir sürüm
  • amd epyc_7351p_firmwarenaplespi-sp3_1.0.0.g ya da sonraki bir sürüm
  • amd epyc_7351_firmwarenaplespi-sp3_1.0.0.g ya da sonraki bir sürüm
  • amd epyc_7301_firmwarenaplespi-sp3_1.0.0.g ya da sonraki bir sürüm
  • amd epyc_7281_firmwarenaplespi-sp3_1.0.0.g ya da sonraki bir sürüm
  • amd epyc_7261_firmwarenaplespi-sp3_1.0.0.g ya da sonraki bir sürüm

Etkilenen ürünler

ÜrünEtkilenen sürümlerDüzeltildiği sürüm
amd epyc_7601_firmwarev < naplespi-sp3_1.0.0.gnaplespi-sp3_1.0.0.g
amd epyc_7551p_firmwarev < naplespi-sp3_1.0.0.gnaplespi-sp3_1.0.0.g
amd epyc_7551_firmwarev < naplespi-sp3_1.0.0.gnaplespi-sp3_1.0.0.g
amd epyc_7501_firmwarev < naplespi-sp3_1.0.0.gnaplespi-sp3_1.0.0.g
amd epyc_7451_firmwarev < naplespi-sp3_1.0.0.gnaplespi-sp3_1.0.0.g
amd epyc_7401_firmwarev < naplespi-sp3_1.0.0.gnaplespi-sp3_1.0.0.g
amd epyc_7371_firmwarev < naplespi-sp3_1.0.0.gnaplespi-sp3_1.0.0.g
amd epyc_7351p_firmwarev < naplespi-sp3_1.0.0.gnaplespi-sp3_1.0.0.g
amd epyc_7351_firmwarev < naplespi-sp3_1.0.0.gnaplespi-sp3_1.0.0.g
amd epyc_7301_firmwarev < naplespi-sp3_1.0.0.gnaplespi-sp3_1.0.0.g
amd epyc_7281_firmwarev < naplespi-sp3_1.0.0.gnaplespi-sp3_1.0.0.g
amd epyc_7261_firmwarev < naplespi-sp3_1.0.0.gnaplespi-sp3_1.0.0.g
amd epyc_7251_firmwarev < naplespi-sp3_1.0.0.gnaplespi-sp3_1.0.0.g
amd epyc_7f72_firmwarev < romepi-sp3_1.0.0.cromepi-sp3_1.0.0.c
amd epyc_7f52_firmwarev < romepi-sp3_1.0.0.cromepi-sp3_1.0.0.c
amd epyc_7f32_firmwarev < romepi-sp3_1.0.0.cromepi-sp3_1.0.0.c
amd epyc_7h12_firmwarev < romepi-sp3_1.0.0.cromepi-sp3_1.0.0.c
amd epyc_7742_firmwarev < romepi-sp3_1.0.0.cromepi-sp3_1.0.0.c
amd epyc_7702_firmwarev < romepi-sp3_1.0.0.cromepi-sp3_1.0.0.c
amd epyc_7702p_firmwarev < romepi-sp3_1.0.0.cromepi-sp3_1.0.0.c
amd epyc_7662_firmwarev < romepi-sp3_1.0.0.cromepi-sp3_1.0.0.c
amd epyc_7642_firmwarev < romepi-sp3_1.0.0.cromepi-sp3_1.0.0.c
amd epyc_7552_firmwarev < romepi-sp3_1.0.0.cromepi-sp3_1.0.0.c
amd epyc_7542_firmwarev < romepi-sp3_1.0.0.cromepi-sp3_1.0.0.c
amd epyc_7532_firmwarev < romepi-sp3_1.0.0.cromepi-sp3_1.0.0.c
amd epyc_7502_firmwarev < romepi-sp3_1.0.0.cromepi-sp3_1.0.0.c
amd epyc_7502p_firmwarev < romepi-sp3_1.0.0.cromepi-sp3_1.0.0.c
amd epyc_7452_firmwarev < romepi-sp3_1.0.0.cromepi-sp3_1.0.0.c
amd epyc_7402_firmwarev < romepi-sp3_1.0.0.cromepi-sp3_1.0.0.c
amd epyc_7402p_firmwarev < romepi-sp3_1.0.0.cromepi-sp3_1.0.0.c
amd epyc_7352_firmwarev < romepi-sp3_1.0.0.cromepi-sp3_1.0.0.c
amd epyc_7302_firmwarev < romepi-sp3_1.0.0.cromepi-sp3_1.0.0.c
amd epyc_7302p_firmwarev < romepi-sp3_1.0.0.cromepi-sp3_1.0.0.c
amd epyc_7282_firmwarev < romepi-sp3_1.0.0.cromepi-sp3_1.0.0.c
amd epyc_7272_firmwarev < romepi-sp3_1.0.0.cromepi-sp3_1.0.0.c
amd epyc_7262_firmwarev < romepi-sp3_1.0.0.cromepi-sp3_1.0.0.c
amd epyc_7252_firmwarev < romepi-sp3_1.0.0.cromepi-sp3_1.0.0.c
amd epyc_7232p_firmwarev < romepi-sp3_1.0.0.cromepi-sp3_1.0.0.c
amd epyc_7763_firmwarev < milanpi-sp3_1.0.0.4milanpi-sp3_1.0.0.4
amd epyc_7713p_firmwarev < milanpi-sp3_1.0.0.4milanpi-sp3_1.0.0.4
amd epyc_7713_firmwarev < milanpi-sp3_1.0.0.4milanpi-sp3_1.0.0.4
amd epyc_7663_firmwarev < milanpi-sp3_1.0.0.4milanpi-sp3_1.0.0.4
amd epyc_7643_firmwarev < milanpi-sp3_1.0.0.4milanpi-sp3_1.0.0.4
amd epyc_75f3_firmwarev < milanpi-sp3_1.0.0.4milanpi-sp3_1.0.0.4
amd epyc_7543p_firmwarev < milanpi-sp3_1.0.0.4milanpi-sp3_1.0.0.4
amd epyc_7543_firmwarev < milanpi-sp3_1.0.0.4milanpi-sp3_1.0.0.4
amd epyc_7513_firmwarev < milanpi-sp3_1.0.0.4milanpi-sp3_1.0.0.4
amd epyc_7453_firmwarev < milanpi-sp3_1.0.0.4milanpi-sp3_1.0.0.4
amd epyc_74f3_firmwarev < milanpi-sp3_1.0.0.4milanpi-sp3_1.0.0.4
amd epyc_7443p_firmwarev < milanpi-sp3_1.0.0.4milanpi-sp3_1.0.0.4
amd epyc_7443_firmwarev < milanpi-sp3_1.0.0.4milanpi-sp3_1.0.0.4
amd epyc_7413_firmwarev < milanpi-sp3_1.0.0.4milanpi-sp3_1.0.0.4
amd epyc_73f3_firmwarev < milanpi-sp3_1.0.0.4milanpi-sp3_1.0.0.4
amd epyc_7343_firmwarev < milanpi-sp3_1.0.0.4milanpi-sp3_1.0.0.4
amd epyc_7313p_firmwarev < milanpi-sp3_1.0.0.4milanpi-sp3_1.0.0.4
amd epyc_7313_firmwarev < milanpi-sp3_1.0.0.4milanpi-sp3_1.0.0.4
amd epyc_72f3_firmwarev < milanpi-sp3_1.0.0.4milanpi-sp3_1.0.0.4

Sürümünüzü kontrol edin

Ürünü seçin ve kullandığınız sürümü yazın; sürümün etkilenen aralıkta olup olmadığını görün.

Intelligence 360 paketinde

Attack Surface Management

Alan adlarınıza bağlı varlıkları, bu varlıklarda çalışan teknolojileri ve bilinen zafiyetleri tek listede görün.

CVE-2021-26320 · Amd Epyc 7601 Firmware · Dark Radar