CVE-2021-46766

Published: Nov 14, 2023Modified: Jun 17, 2026

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

Improper clearing of sensitive data in the ASP Bootloader may expose secret keys to a privileged attacker accessing ASP SRAM, potentially leading to a loss of confidentiality.

Affected (28)

Products: Amd: Epyc 9654p Firmware, Epyc 9654 Firmware, Epyc 9634 Firmware, Epyc 9554p Firmware, Epyc 9554 Firmware, Epyc 9534 Firmware, Epyc 9474f Firmware, Epyc 9454p Firmware, Epyc 9454 Firmware, Epyc 9374f Firmware, Epyc 9354p Firmware, Epyc 9354 Firmware, Epyc 9334 Firmware, Epyc 9274f Firmware, Epyc 9254 Firmware, Epyc 9224 Firmware, Epyc 9174f Firmware, Epyc 9124 Firmware, Epyc 9684x Firmware, Epyc 9384x Firmware, Epyc 9184x Firmware, Epyc 9754 Firmware, Epyc 9754s Firmware, Epyc 9734 Firmware, Ryzen Threadripper Pro 3995wx Firmware, Ryzen Threadripper Pro 3975wx Firmware, Ryzen Threadripper Pro 3955wx Firmware, Ryzen Threadripper Pro 3945wx Firmware

28 products

Ryzen Threadripper Pro 3995wx Firmware

Ryzen Threadripper Pro 3975wx Firmware

Ryzen Threadripper Pro 3955wx Firmware

Ryzen Threadripper Pro 3945wx Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Epyc 9654p Firmware	Before genoapi_1.0.0.4

Running on/with	Platform Versions
Amd Epyc 9654p	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Epyc 9654 Firmware	Before genoapi_1.0.0.4

Running on/with	Platform Versions
Amd Epyc 9654	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Epyc 9634 Firmware	Before genoapi_1.0.0.4

Running on/with	Platform Versions
Amd Epyc 9634	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Epyc 9554p Firmware	Before genoapi_1.0.0.4

Running on/with	Platform Versions
Amd Epyc 9554p	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Epyc 9554 Firmware	Before genoapi_1.0.0.4

Running on/with	Platform Versions
Amd Epyc 9554	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Epyc 9534 Firmware	Before genoapi_1.0.0.4

Running on/with	Platform Versions
Amd Epyc 9534	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Epyc 9474f Firmware	Before genoapi_1.0.0.4

Running on/with	Platform Versions
Amd Epyc 9474f	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Epyc 9454p Firmware	Before genoapi_1.0.0.4

Running on/with	Platform Versions
Amd Epyc 9454p	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Epyc 9454 Firmware	Before genoapi_1.0.0.4

Running on/with	Platform Versions
Amd Epyc 9454	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Epyc 9374f Firmware	Before genoapi_1.0.0.4

Running on/with	Platform Versions
Amd Epyc 9374f	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Epyc 9354p Firmware	Before genoapi_1.0.0.4

Running on/with	Platform Versions
Amd Epyc 9354p	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Epyc 9354 Firmware	Before genoapi_1.0.0.4

Running on/with	Platform Versions
Amd Epyc 9354	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Epyc 9334 Firmware	Before genoapi_1.0.0.4

Running on/with	Platform Versions
Amd Epyc 9334	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Epyc 9274f Firmware	Before genoapi_1.0.0.4

Running on/with	Platform Versions
Amd Epyc 9274f	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Epyc 9254 Firmware	Before genoapi_1.0.0.4

Running on/with	Platform Versions
Amd Epyc 9254	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Epyc 9224 Firmware	Before genoapi_1.0.0.4

Running on/with	Platform Versions
Amd Epyc 9224	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Epyc 9174f Firmware	Before genoapi_1.0.0.4

Running on/with	Platform Versions
Amd Epyc 9174f	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Epyc 9124 Firmware	Before genoapi_1.0.0.4

Running on/with	Platform Versions
Amd Epyc 9124	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Epyc 9684x Firmware	Before genoapi_1.0.0.4

Running on/with	Platform Versions
Amd Epyc 9684x	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Epyc 9384x Firmware	Before genoapi_1.0.0.4

Running on/with	Platform Versions
Amd Epyc 9384x	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Epyc 9184x Firmware	Before genoapi_1.0.0.4

Running on/with	Platform Versions
Amd Epyc 9184x	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Epyc 9754 Firmware	Before genoapi_1.0.0.4

Running on/with	Platform Versions
Amd Epyc 9754	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Epyc 9754s Firmware	Before genoapi_1.0.0.4

Running on/with	Platform Versions
Amd Epyc 9754s	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Epyc 9734 Firmware	Before genoapi_1.0.0.4

Running on/with	Platform Versions
Amd Epyc 9734	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen Threadripper Pro 3995wx Firmware	Before chagallwspi-swrx8_1.0.0.5

Running on/with	Platform Versions
Amd Ryzen Threadripper Pro 3995wx	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen Threadripper Pro 3975wx Firmware	Before chagallwspi-swrx8_1.0.0.5

Running on/with	Platform Versions
Amd Ryzen Threadripper Pro 3975wx	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen Threadripper Pro 3955wx Firmware	Before chagallwspi-swrx8_1.0.0.5

Running on/with	Platform Versions
Amd Ryzen Threadripper Pro 3955wx	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen Threadripper Pro 3945wx Firmware	Before chagallwspi-swrx8_1.0.0.5

Running on/with	Platform Versions
Amd Ryzen Threadripper Pro 3945wx	All versions

Related CWEs

CWE-459

Incomplete Cleanup

The product does not properly "clean up" and remove temporary or supporting resources after they have been used.

References (6)

https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3002

Source: psirt@amd.com

Vendor Advisory

https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4002

Source: psirt@amd.com

Vendor Advisory

https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-5001

Source: psirt@amd.com

https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3002

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4002

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-5001

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.