V
Scaner-VS
ENRU
HomeCatalogSourcesCWECAPECATT&CKMitigationsProductsVendorsDocs
←Back to catalog
CVE-2021-26317
CVE
High

Failure to verify the protocol in SMM may allow an attacker to control the protocol and modify SPI flash resulting in a potential arbitrary…

CVSS
7.8
High
EPSS
0.00
p18
Published
2021-01-01
Updated
2021-01-01
Description

Failure to verify the protocol in SMM may allow an attacker to control the protocol and modify SPI flash resulting in a potential arbitrary code execution.

Affected products
Radeon_software
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Timeline
2021-01-01
Published
2021-01-01
Updated
CVSS 3.1 breakdown
Attack Vector
AV: L
Local (L)
Attack Complexity
AC: L
Low (L)
Privileges Required
PR: L
Low (L)
User Interaction
UI: N
None (N)
Scope
S: U
Unchanged (U)
Confidentiality Impact
C: H
High (H)
Integrity Impact
I: H
High (H)
Availability Impact
A: H
High (H)
Exploit indicators
EPSS
0.003 · p18
Known exploited (KEV)
No
Known exploits — Сканер-ВС
No Сканер-ВС checks registered for this vulnerability yet.
Affected products
Amd
Radeon SoftwareRyzen 5 5600hRyzen 5 5600hsRyzen 5 5600uRyzen 5 5600h FirmwareRyzen 5 5600hs FirmwareRyzen 5 5600u FirmwareRyzen 3 5400uRyzen 7 5800hRyzen 7 5800hs+137
ProductVendorStatus
athlon_3050ge_firmware*Tracked
athlon_3150g_firmware*Tracked
athlon_3150ge_firmware*Tracked
radeon_software*Tracked
ryzen_3_2200u_firmware*Tracked
ryzen_3_2300u_firmware*Tracked
ryzen_3_3100_firmware*Tracked
ryzen_3_3300g_firmware*Tracked
ryzen_3_3300x_firmware*Tracked
ryzen_3_5125c_firmware*Tracked
ryzen_3_5400u_firmware*Tracked
ryzen_3_5425c_firmware*Tracked
ryzen_3_5425u_firmware*Tracked
ryzen_5300g_firmware*Tracked
ryzen_5300ge_firmware*Tracked
ryzen_5600g_firmware*Tracked
ryzen_5600ge_firmware*Tracked
ryzen_5600x_firmware*Tracked
ryzen_5700g_firmware*Tracked
ryzen_5700ge_firmware*Tracked
Showing first 20 of 74
Source databases
CVE