CVE-2021-26315
Last modified
CVE-2021-26315 is a high-severity vulnerability rated 7.8/10 on the CVSS scale. When the AMD Platform Security Processor (PSP) boot rom loads, authenticates, and subsequently decrypts an encrypted FW, due to insufficient verification of the integrity of decrypted image, arbitrary code may be executed in the PSP when encrypted firmware images are used.. EPSS estimates a 0.16% chance of exploitation in the next 30 days.
Description
When the AMD Platform Security Processor (PSP) boot rom loads, authenticates, and subsequently decrypts an encrypted FW, due to insufficient verification of the integrity of decrypted image, arbitrary code may be executed in the PSP when encrypted firmware images are used.
Metrics
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Amd | Epyc 7003 Firmware | < milanpi-sp3_1.0.0.4 |
| Amd | Epyc 72f3 Firmware | < milanpi-sp3_1.0.0.4 |
| Amd | Epyc 7313 Firmware | < milanpi-sp3_1.0.0.4 |
| Amd | Epyc 7313p Firmware | < milanpi-sp3_1.0.0.4 |
| Amd | Epyc 7343 Firmware | < milanpi-sp3_1.0.0.4 |
| Amd | Epyc 73f3 Firmware | < milanpi-sp3_1.0.0.4 |
| Amd | Epyc 7413 Firmware | < milanpi-sp3_1.0.0.4 |
| Amd | Epyc 7443 Firmware | < milanpi-sp3_1.0.0.4 |
| Amd | Epyc 7443p Firmware | < milanpi-sp3_1.0.0.4 |
| Amd | Epyc 7453 Firmware | < milanpi-sp3_1.0.0.4 |
| Amd | Epyc 74f3 Firmware | < milanpi-sp3_1.0.0.4 |
| Amd | Epyc 7513 Firmware | < milanpi-sp3_1.0.0.4 |
| Amd | Epyc 7543 Firmware | < milanpi-sp3_1.0.0.4 |
| Amd | Epyc 7543p Firmware | < milanpi-sp3_1.0.0.4 |
| Amd | Epyc 75f3 Firmware | < milanpi-sp3_1.0.0.4 |
| Amd | Epyc 7643 Firmware | < milanpi-sp3_1.0.0.4 |
| Amd | Epyc 7663 Firmware | < milanpi-sp3_1.0.0.4 |
| Amd | Epyc 7713 Firmware | < milanpi-sp3_1.0.0.4 |
| Amd | Epyc 7713p Firmware | < milanpi-sp3_1.0.0.4 |
| Amd | Epyc 7763 Firmware | < milanpi-sp3_1.0.0.4 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2021-26315?
How severe is CVE-2021-26315?
How do I fix CVE-2021-26315?
How Strix Helps
- Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2021
- CVE-2021-26309Information disclosure in the TeamCity plugin for IntelliJ b…3.3
- CVE-2021-26310In the TeamCity IntelliJ plugin before 2020.2.2.85899, DoS w…7.5
- CVE-2021-26311In the AMD SEV/SEV-ES feature, memory can be rearranged in t…7.2
- CVE-2021-26312Failure to flush the Translation Lookaside Buffer (TLB) of t…5.5
- CVE-2021-26313Potential speculative code store bypass in all supported CPU…5.5
- CVE-2021-26314Potential floating point value injection in all supported CP…5.5
- CVE-2021-26316Failure to validate the communication buffer and communicati…7.8
- CVE-2021-26317Failure to verify the protocol in SMM may allow an attacker …7.8
- CVE-2021-26318A timing and power-based side channel attack leveraging the …4.7
- CVE-2021-26319Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2021-26320Insufficient validation of the AMD SEV Signing Key (ASK) in …5.5
- CVE-2021-26321Insufficient ID command validation in the SEV Firmware may a…5.5
Are you affected by CVE-2021-26315?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST