CVE-2021-26327
Estado: ModificadaMedia (5.5)—
Insufficient validation of guest context in the SNP Firmware could lead to a potential loss of guest confidentiality.
CVSS
- Versión: 3.1
- Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- Puntuación base: 5.5
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.24%
- Percentil entre todas las CVEs puntuadas: 14
- Fecha de la puntuación: 4/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (20)
AMD — Epyc 7003 FirmwareAMD — Epyc 72f3 FirmwareAMD — Epyc 7313 FirmwareAMD — Epyc 7313p FirmwareAMD — Epyc 7343 FirmwareAMD — Epyc 73f3 FirmwareAMD — Epyc 7413 FirmwareAMD — Epyc 7443 FirmwareAMD — Epyc 7443p FirmwareAMD — Epyc 7453 FirmwareAMD — Epyc 74f3 FirmwareAMD — Epyc 7513 FirmwareAMD — Epyc 7543 FirmwareAMD — Epyc 7543p FirmwareAMD — Epyc 75f3 FirmwareAMD — Epyc 7643 FirmwareAMD — Epyc 7663 FirmwareAMD — Epyc 7713 FirmwareAMD — Epyc 7713p FirmwareAMD — Epyc 7763 Firmware
CWE
- CWE-20
- CWE-668
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2021-26327",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 2.1,
"accessVector": "LOCAL",
"vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N",
"authentication": "NONE",
"integrityImpact": "NONE",
"accessComplexity": "LOW",
"availabilityImpact": "NONE",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": false,
"impactScore": 2.9,
"baseSeverity": "LOW",
"obtainAllPrivilege": false,
"exploitabilityScore": 3.9,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
],
"cvssMetricV31": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 5.5,
"attackVector": "LOCAL",
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"integrityImpact": "NONE",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "NONE",
"privilegesRequired": "LOW",
"confidentialityImpact": "HIGH"
},
"impactScore": 3.6,
"exploitabilityScore": 1.8
}
]
},
"affected": [
{
"source": "psirt@amd.com",
"affectedData": [
{
"vendor": "AMD",
"product": "3rd Gen AMD EPYC™",
"versions": [
{
"status": "affected",
"version": "unspecified",
"lessThan": "MilanPI-SP3_1.0.0.4",
"versionType": "custom"
}
]
}
]
}
],
"published": "2021-11-16T19:15:07.987",
"references": [
{
"url": "https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1021",
"tags": [
"Vendor Advisory"
],
"source": "psirt@amd.com"
},
{
"url": "https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1021",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Secondary",
"source": "psirt@amd.com",
"description": [
{
"lang": "en",
"value": "CWE-20"
}
]
},
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-668"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Insufficient validation of guest context in the SNP Firmware could lead to a potential loss of guest confidentiality."
},
{
"lang": "es",
"value": "Una comprobación insuficiente del contexto del huésped en el Firmware SNP podría conllevar una potencial pérdida de confidencialidad del huésped"
}
],
"lastModified": "2026-06-17T03:43:07.683",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:epyc_7003_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "85F21749-D015-4195-BCF5-0EC546559090",
"versionEndExcluding": "milanpi-sp3_1.0.0.4"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:epyc_7003:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "C912AA31-FB2D-4BD9-B1BD-3C8D7EEE771C"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:epyc_72f3_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2C7CAA93-4553-4EE7-8DED-4E607F62DAF8",
"versionEndExcluding": "milanpi-sp3_1.0.0.4"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:epyc_72f3:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "7F98FF1A-3A2B-4CED-AEA2-9C4F2AC2D8C1"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:epyc_7313_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C793CE0D-A5D2-4279-8A2E-056C0E34DCD3",
"versionEndExcluding": "milanpi-sp3_1.0.0.4"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:epyc_7313:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "B02B61B7-7DD3-4164-8D32-EB961E981BC9"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:epyc_7313p_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C951EB53-A85E-4AC3-8076-167AD244B605",
"versionEndExcluding": "milanpi-sp3_1.0.0.4"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:epyc_7313p:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "9000686A-DC2B-4561-9C32-E90890EB2EBA"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:epyc_7343_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AA050CB2-9587-4534-A766-D434ED2BA2BA",
"versionEndExcluding": "milanpi-sp3_1.0.0.4"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:epyc_7343:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "71B9C24B-2C10-4826-A91B-E1C60665FBBE"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:epyc_73f3_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B09197BA-5C2D-4616-BADF-A6D2FE9FB044",
"versionEndExcluding": "milanpi-sp3_1.0.0.4"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:epyc_73f3:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "678C5F58-8AE9-46FF-8F01-4CF394C87A2C"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:epyc_7413_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "85E3C6E9-D601-4BC0-99B8-118D1CCAE1D4",
"versionEndExcluding": "milanpi-sp3_1.0.0.4"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:epyc_7413:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "D1766FF1-77A9-4293-B826-F6A8FBD7AFBF"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:epyc_7443_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AC530984-C23F-4C2A-B07A-689C69C08EC4",
"versionEndExcluding": "milanpi-sp3_1.0.0.4"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:epyc_7443:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "4C474537-3006-41BA-8C3D-5C370E3ACECD"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:epyc_7443p_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1271AB1A-2AD6-4837-801F-53B25724AD06",
"versionEndExcluding": "milanpi-sp3_1.0.0.4"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:epyc_7443p:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "8E2B13CA-72F4-4CF6-9E12-62E6E9056A14"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:epyc_7453_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7596F9F6-7216-4A6C-A1A4-02F1719A5506",
"versionEndExcluding": "milanpi-sp3_1.0.0.4"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:epyc_7453:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "241E39FF-FE66-444C-A4C2-3D28C45341BE"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:epyc_74f3_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "01FE866B-C654-4A7A-B65A-A3BEFA896D87",
"versionEndExcluding": "milanpi-sp3_1.0.0.4"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:epyc_74f3:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "02D08121-DC57-47D7-8214-23A209F0AF08"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:epyc_7513_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0655082D-02E4-4708-B749-F035E87A3CCA",
"versionEndExcluding": "milanpi-sp3_1.0.0.4"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:epyc_7513:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "F8264DF4-47B4-4716-AE89-44AFA870D385"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:epyc_7543_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "30CDB8F3-A757-449B-A66E-3F0E443E6001",
"versionEndExcluding": "milanpi-sp3_1.0.0.4"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:epyc_7543:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "52544912-FAA3-4025-A5FD-151B21CEC53B"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:epyc_7543p_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8F375A23-E6B5-4998-960D-764AE7F2E202",
"versionEndExcluding": "milanpi-sp3_1.0.0.4"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:epyc_7543p:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "77A0A47B-74A1-4731-92A8-BC10FFE58ECF"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:epyc_75f3_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1DD8F2DC-5263-4FDF-B13A-70A4D15361A0",
"versionEndExcluding": "milanpi-sp3_1.0.0.4"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:epyc_75f3:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "EBF0AFED-588A-4EFB-8C90-9280BC3A6720"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:epyc_7643_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FA78545E-FDD6-49DA-8DDD-F1FB504EC59A",
"versionEndExcluding": "milanpi-sp3_1.0.0.4"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:epyc_7643:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "98E1D79D-0CB0-4FD9-8A82-27CDFBFE07B2"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:epyc_7663_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A9B05DF1-54B5-4C8D-ABEB-489D0ED90FFC",
"versionEndExcluding": "milanpi-sp3_1.0.0.4"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:epyc_7663:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "A7DFCB62-6CDF-4AD2-9265-1887E5780CA5"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:epyc_7713_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FD918198-F9C6-41B3-A338-F64DEBCC017C",
"versionEndExcluding": "milanpi-sp3_1.0.0.4"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:epyc_7713:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "4D698D3E-BB05-4C65-90F4-8DAE275CD6A4"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:epyc_7713p_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5BB074EC-A5CC-4E6A-8CDF-80B0E04D70B1",
"versionEndExcluding": "milanpi-sp3_1.0.0.4"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:epyc_7713p:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "2299ED50-B4D2-4BB3-AD87-56D552B84AE1"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:epyc_7763_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "89BE6D92-D0B1-4092-ACB7-DE987FC026B5",
"versionEndExcluding": "milanpi-sp3_1.0.0.4"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:epyc_7763:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "4F900BDD-F094-41A6-9A23-31F53DBA95D4"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"sourceIdentifier": "psirt@amd.com"
}