CVE-2021-26353
Estado: ModificadaAlta (7.8)—
Failure to validate inputs in SMM may allow an attacker to create a mishandled error leaving the DRTM UApp in a partially initialized state potentially resulting in loss of memory integrity.
CVSS
- Versión: 3.1
- Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Puntuación base: 7.8
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.27%
- Percentil entre todas las CVEs puntuadas: 17
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (23)
AMD — Epyc 72f3 FirmwareAMD — Epyc 7313 FirmwareAMD — Epyc 7313p FirmwareAMD — Epyc 7343 FirmwareAMD — Epyc 7373x FirmwareAMD — Epyc 73f3 FirmwareAMD — Epyc 7413 FirmwareAMD — Epyc 7443 FirmwareAMD — Epyc 7443p FirmwareAMD — Epyc 7453 FirmwareAMD — Epyc 7473x FirmwareAMD — Epyc 74f3 FirmwareAMD — Epyc 7513 FirmwareAMD — Epyc 7543 FirmwareAMD — Epyc 7543p FirmwareAMD — Epyc 7573x FirmwareAMD — Epyc 75f3 FirmwareAMD — Epyc 7643 FirmwareAMD — Epyc 7663 FirmwareAMD — Epyc 7713 FirmwareAMD — Epyc 7713p FirmwareAMD — Epyc 7763 FirmwareAMD — Epyc 7773x Firmware
CWE
- CWE-665
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2021-26353",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 7.2,
"accessVector": "LOCAL",
"vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
"authentication": "NONE",
"integrityImpact": "COMPLETE",
"accessComplexity": "LOW",
"availabilityImpact": "COMPLETE",
"confidentialityImpact": "COMPLETE"
},
"acInsufInfo": false,
"impactScore": 10,
"baseSeverity": "HIGH",
"obtainAllPrivilege": false,
"exploitabilityScore": 3.9,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
],
"cvssMetricV31": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 7.8,
"attackVector": "LOCAL",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"integrityImpact": "HIGH",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "LOW",
"confidentialityImpact": "HIGH"
},
"impactScore": 5.9,
"exploitabilityScore": 1.8
}
]
},
"affected": [
{
"source": "psirt@amd.com",
"affectedData": [
{
"vendor": "AMD",
"product": "3rd Gen EPYC",
"versions": [
{
"status": "affected",
"version": "various"
}
],
"platforms": [
"x86"
],
"packageName": "AGESA",
"defaultStatus": "unaffected"
}
]
}
],
"published": "2022-05-10T19:15:08.657",
"references": [
{
"url": "https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032",
"source": "psirt@amd.com"
},
{
"url": "https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-665"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Failure to validate inputs in SMM may allow an attacker to create a mishandled error leaving the DRTM UApp in a partially initialized state potentially resulting in loss of memory integrity."
},
{
"lang": "es",
"value": "Debido a un error manejado inapropiadamente, es posible dejar la UApp DRTM en un estado parcialmente inicializado, lo que puede resultar en escrituras de memoria no verificadas cuando la UApp maneja comandos de buzón posteriores"
}
],
"lastModified": "2026-06-17T03:43:12.863",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:epyc_7763_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "89BE6D92-D0B1-4092-ACB7-DE987FC026B5",
"versionEndExcluding": "milanpi-sp3_1.0.0.4"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:epyc_7763:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "4F900BDD-F094-41A6-9A23-31F53DBA95D4"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:epyc_7713p_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5BB074EC-A5CC-4E6A-8CDF-80B0E04D70B1",
"versionEndExcluding": "milanpi-sp3_1.0.0.4"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:epyc_7713p:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "2299ED50-B4D2-4BB3-AD87-56D552B84AE1"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:epyc_7713_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FD918198-F9C6-41B3-A338-F64DEBCC017C",
"versionEndExcluding": "milanpi-sp3_1.0.0.4"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:epyc_7713:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "4D698D3E-BB05-4C65-90F4-8DAE275CD6A4"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:epyc_7663_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A9B05DF1-54B5-4C8D-ABEB-489D0ED90FFC",
"versionEndExcluding": "milanpi-sp3_1.0.0.4"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:epyc_7663:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "A7DFCB62-6CDF-4AD2-9265-1887E5780CA5"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:epyc_7643_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FA78545E-FDD6-49DA-8DDD-F1FB504EC59A",
"versionEndExcluding": "milanpi-sp3_1.0.0.4"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:epyc_7643:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "98E1D79D-0CB0-4FD9-8A82-27CDFBFE07B2"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:epyc_75f3_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1DD8F2DC-5263-4FDF-B13A-70A4D15361A0",
"versionEndExcluding": "milanpi-sp3_1.0.0.4"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:epyc_75f3:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "EBF0AFED-588A-4EFB-8C90-9280BC3A6720"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:epyc_7543p_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8F375A23-E6B5-4998-960D-764AE7F2E202",
"versionEndExcluding": "milanpi-sp3_1.0.0.4"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:epyc_7543p:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "77A0A47B-74A1-4731-92A8-BC10FFE58ECF"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:epyc_7543_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "30CDB8F3-A757-449B-A66E-3F0E443E6001",
"versionEndExcluding": "milanpi-sp3_1.0.0.4"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:epyc_7543:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "52544912-FAA3-4025-A5FD-151B21CEC53B"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:epyc_7513_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0655082D-02E4-4708-B749-F035E87A3CCA",
"versionEndExcluding": "milanpi-sp3_1.0.0.4"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:epyc_7513:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "F8264DF4-47B4-4716-AE89-44AFA870D385"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:epyc_7453_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7596F9F6-7216-4A6C-A1A4-02F1719A5506",
"versionEndExcluding": "milanpi-sp3_1.0.0.4"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:epyc_7453:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "241E39FF-FE66-444C-A4C2-3D28C45341BE"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:epyc_74f3_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "01FE866B-C654-4A7A-B65A-A3BEFA896D87",
"versionEndExcluding": "milanpi-sp3_1.0.0.4"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:epyc_74f3:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "02D08121-DC57-47D7-8214-23A209F0AF08"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:epyc_7443p_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1271AB1A-2AD6-4837-801F-53B25724AD06",
"versionEndExcluding": "milanpi-sp3_1.0.0.4"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:epyc_7443p:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "8E2B13CA-72F4-4CF6-9E12-62E6E9056A14"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:epyc_7443_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AC530984-C23F-4C2A-B07A-689C69C08EC4",
"versionEndExcluding": "milanpi-sp3_1.0.0.4"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:epyc_7443:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "4C474537-3006-41BA-8C3D-5C370E3ACECD"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:epyc_7413_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "85E3C6E9-D601-4BC0-99B8-118D1CCAE1D4",
"versionEndExcluding": "milanpi-sp3_1.0.0.4"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:epyc_7413:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "D1766FF1-77A9-4293-B826-F6A8FBD7AFBF"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:epyc_73f3_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B09197BA-5C2D-4616-BADF-A6D2FE9FB044",
"versionEndExcluding": "milanpi-sp3_1.0.0.4"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:epyc_73f3:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "678C5F58-8AE9-46FF-8F01-4CF394C87A2C"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:epyc_7343_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AA050CB2-9587-4534-A766-D434ED2BA2BA",
"versionEndExcluding": "milanpi-sp3_1.0.0.4"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:epyc_7343:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "71B9C24B-2C10-4826-A91B-E1C60665FBBE"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:epyc_7313p_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C951EB53-A85E-4AC3-8076-167AD244B605",
"versionEndExcluding": "milanpi-sp3_1.0.0.4"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:epyc_7313p:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "9000686A-DC2B-4561-9C32-E90890EB2EBA"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:epyc_7313_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C793CE0D-A5D2-4279-8A2E-056C0E34DCD3",
"versionEndExcluding": "milanpi-sp3_1.0.0.4"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:epyc_7313:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "B02B61B7-7DD3-4164-8D32-EB961E981BC9"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:epyc_72f3_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2C7CAA93-4553-4EE7-8DED-4E607F62DAF8",
"versionEndExcluding": "milanpi-sp3_1.0.0.4"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:epyc_72f3:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "7F98FF1A-3A2B-4CED-AEA2-9C4F2AC2D8C1"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:epyc_7773x_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FBBDB4C7-ACE7-4E2C-AEB7-43A43D6EDA02",
"versionEndExcluding": "milanpi-sp3_1.0.0.4"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:epyc_7773x:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "D02B1C69-BAA4-485B-BE22-46BE321F9E4E"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:epyc_7473x_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3E2E06DC-6338-4D73-A7F4-C004CBAC7D02",
"versionEndExcluding": "milanpi-sp3_1.0.0.4"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:epyc_7473x:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "D07E922F-C1AB-469C-A1C1-9F9E58332DFC"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:epyc_7573x_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5E32897E-6D86-4C74-ABB7-05844A1E7CA2",
"versionEndExcluding": "milanpi-sp3_1.0.0.4"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:epyc_7573x:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "237FB33B-BF08-4E3E-8E83-EB0AD2F12A4B"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:epyc_7373x_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "84179B6A-5F03-4F90-A8B5-730BBBD09CDA",
"versionEndExcluding": "milanpi-sp3_1.0.0.4"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:epyc_7373x:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "180B3002-B3C5-48B5-8322-5B64B237C5B9"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"sourceIdentifier": "psirt@amd.com"
}