cbcvebase.
CVE-2021-46769
published 2023-05-09

CVE-2021-46769: Insufficient syscall input validation in the ASP Bootloader may allow a privileged attacker to execute arbitrary DMA copies, which can lead to code execution.

PriorityP355high8.8CVSS 3.1
AVNACLPRLUINSUCHIHAH
EPSS
0.78%
55.6th percentile
Insufficient syscall input validation in the ASP Bootloader may allow a privileged attacker to execute arbitrary DMA copies, which can lead to code execution.

Affected

50 ranges· showing 25
VendorProductVersion rangeFixed in
amd2nd_gen_amd_epyc——
amd3rd_gen_amd_epyc——
amdepyc_7232p_firmware——
amdepyc_7252_firmware——
amdepyc_7262_firmware——
amdepyc_7272_firmware——
amdepyc_7282_firmware——
amdepyc_72f3_firmware——
amdepyc_7302_firmware——
amdepyc_7302p_firmware——
amdepyc_7313_firmware——
amdepyc_7313p_firmware——
amdepyc_7343_firmware——
amdepyc_7352_firmware——
amdepyc_7373x_firmware——
amdepyc_73f3_firmware——
amdepyc_7402_firmware——
amdepyc_7402p_firmware——
amdepyc_7413_firmware——
amdepyc_7443_firmware——
amdepyc_7443p_firmware——
amdepyc_7452_firmware——
amdepyc_7453_firmware——
amdepyc_7473x_firmware——
amdepyc_74f3_firmware——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.