HIGH · 7.5

CVE-2021-46755

Failure to unmap certain SysHub mappings in error paths of the ASP (AMD Secure Processor) bootloader may allow an attacker with a malicious bootloader to exhaust the SysHub resources resulting in a po...

Vulnerability Description

Failure to unmap certain SysHub mappings in error paths of the ASP (AMD Secure Processor) bootloader may allow an attacker with a malicious bootloader to exhaust the SysHub resources resulting in a potential denial of service.

CVSS Score

7.5

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH

Affected Products

VendorProductVersions
AmdRyzen 5500 Firmwarecomboam4_v2_pi_1.2.0.8
AmdRyzen 5500-
AmdRyzen 5600 Firmwarecomboam4_v2_pi_1.2.0.8
AmdRyzen 5600-
AmdRyzen 5600G Firmwarecomboam4_v2_pi_1.2.0.8
AmdRyzen 5600G-
AmdRyzen 5600X Firmwarecomboam4_v2_pi_1.2.0.8
AmdRyzen 5600X-
AmdRyzen 5700G Firmwarecomboam4_v2_pi_1.2.0.8
AmdRyzen 5700G-
AmdRyzen 5700X Firmwarecomboam4_v2_pi_1.2.0.8
AmdRyzen 5700X-
AmdRyzen 5800X3D Firmwarecomboam4_v2_pi_1.2.0.8
AmdRyzen 5800X3D-
AmdRyzen 5800X Firmwarecomboam4_v2_pi_1.2.0.8
AmdRyzen 5800X-
AmdRyzen 5900X Firmwarecomboam4_v2_pi_1.2.0.8
AmdRyzen 5900X-
AmdRyzen 5950X Firmwarecomboam4_v2_pi_1.2.0.8
AmdRyzen 5950X-

References

FAQ

What is CVE-2021-46755?

CVE-2021-46755 is a vulnerability with a CVSS score of 7.5 (HIGH). Failure to unmap certain SysHub mappings in error paths of the ASP (AMD Secure Processor) bootloader may allow an attacker with a malicious bootloader to exhaust the SysHub resources resulting in a po...

How severe is CVE-2021-46755?

CVE-2021-46755 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2021-46755?

Check the references section above for vendor advisories and patch information. Affected products include: Amd Ryzen 5500 Firmware, Amd Ryzen 5500, Amd Ryzen 5600 Firmware, Amd Ryzen 5600, Amd Ryzen 5600G Firmware.