CVE-2021-26349
Status: ModifiedMedium (5.5)—
Failure to assign a new report ID to an imported guest may potentially result in an SEV-SNP guest VM being tricked into trusting a dishonest Migration Agent (MA).
CVSS
- Version: 3.1
- Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
- Base score: 5.5
Exploitation probability (EPSS)
- Probability of exploitation in the next 30 days: 0.22%
- Percentile among all scored CVEs: 11
- Score date: 10/7/2026
EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).
Affected technologies (23)
AMD — Epyc 72f3 FirmwareAMD — Epyc 7313 FirmwareAMD — Epyc 7313p FirmwareAMD — Epyc 7343 FirmwareAMD — Epyc 7373x FirmwareAMD — Epyc 73f3 FirmwareAMD — Epyc 7413 FirmwareAMD — Epyc 7443 FirmwareAMD — Epyc 7443p FirmwareAMD — Epyc 7453 FirmwareAMD — Epyc 7473x FirmwareAMD — Epyc 74f3 FirmwareAMD — Epyc 7513 FirmwareAMD — Epyc 7543 FirmwareAMD — Epyc 7543p FirmwareAMD — Epyc 7573x FirmwareAMD — Epyc 75f3 FirmwareAMD — Epyc 7643 FirmwareAMD — Epyc 7663 FirmwareAMD — Epyc 7713 FirmwareAMD — Epyc 7713p FirmwareAMD — Epyc 7763 FirmwareAMD — Epyc 7773x Firmware
CWEs
- NVD-CWE-noinfo
References
Raw JSON (NVD)
Show
{
"id": "CVE-2021-26349",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 2.1,
"accessVector": "LOCAL",
"vectorString": "AV:L/AC:L/Au:N/C:N/I:P/A:N",
"authentication": "NONE",
"integrityImpact": "PARTIAL",
"accessComplexity": "LOW",
"availabilityImpact": "NONE",
"confidentialityImpact": "NONE"
},
"acInsufInfo": false,
"impactScore": 2.9,
"baseSeverity": "LOW",
"obtainAllPrivilege": false,
"exploitabilityScore": 3.9,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
],
"cvssMetricV31": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 5.5,
"attackVector": "LOCAL",
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
"integrityImpact": "HIGH",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "NONE",
"privilegesRequired": "LOW",
"confidentialityImpact": "NONE"
},
"impactScore": 3.6,
"exploitabilityScore": 1.8
}
]
},
"affected": [
{
"source": "psirt@amd.com",
"affectedData": [
{
"vendor": "AMD",
"product": "EPYC™ Processors",
"versions": [
{
"status": "affected",
"version": "various"
}
]
}
]
}
],
"published": "2022-05-11T17:15:08.427",
"references": [
{
"url": "https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1028",
"tags": [
"Vendor Advisory"
],
"source": "psirt@amd.com"
},
{
"url": "https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1028",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Failure to assign a new report ID to an imported guest may potentially result in an SEV-SNP guest VM being tricked into trusting a dishonest Migration Agent (MA)."
},
{
"lang": "es",
"value": "Un fallo en la asignación de un nuevo ID de informe a un huésped importado puede resultar potencialmente en que una VM huésped SEV-SNP sea engañada para confiar en un Agente de Migración (MA) deshonesto"
}
],
"lastModified": "2026-06-17T03:43:12.297",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:epyc_7763_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B25C6225-69FF-4772-84F7-F560AAE3617E",
"versionEndExcluding": "milanpi-sp3_1.0.0.7"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:epyc_7763:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "4F900BDD-F094-41A6-9A23-31F53DBA95D4"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:epyc_7713p_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E1DB1651-2E51-434E-810F-83428B648E7A",
"versionEndExcluding": "milanpi-sp3_1.0.0.7"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:epyc_7713p:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "2299ED50-B4D2-4BB3-AD87-56D552B84AE1"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:epyc_7713_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "717EA494-B9B9-4092-811C-C51C6ECB4322",
"versionEndExcluding": "milanpi-sp3_1.0.0.7"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:epyc_7713:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "4D698D3E-BB05-4C65-90F4-8DAE275CD6A4"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:epyc_7663_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7F117E00-F3D5-4884-8A17-59D23837EC65",
"versionEndExcluding": "milanpi-sp3_1.0.0.7"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:epyc_7663:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "A7DFCB62-6CDF-4AD2-9265-1887E5780CA5"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:epyc_7643_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C499DD69-BE4B-4E43-B19C-C17E79947C51",
"versionEndExcluding": "milanpi-sp3_1.0.0.7"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:epyc_7643:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "98E1D79D-0CB0-4FD9-8A82-27CDFBFE07B2"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:epyc_75f3_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BA967C73-8108-4F41-BFFD-81946C02EB24",
"versionEndExcluding": "milanpi-sp3_1.0.0.7"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:epyc_75f3:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "EBF0AFED-588A-4EFB-8C90-9280BC3A6720"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:epyc_7543p_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "95329A7D-ED5A-40AE-AF5E-B053236DBF77",
"versionEndExcluding": "milanpi-sp3_1.0.0.7"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:epyc_7543p:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "77A0A47B-74A1-4731-92A8-BC10FFE58ECF"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:epyc_7543_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0AD14E00-D597-4099-B4DF-58EE8EEE0B2E",
"versionEndExcluding": "milanpi-sp3_1.0.0.7"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:epyc_7543:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "52544912-FAA3-4025-A5FD-151B21CEC53B"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:epyc_7513_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D2F110B6-28BA-4A4C-8CF7-CB5BFD46D74F",
"versionEndExcluding": "milanpi-sp3_1.0.0.7"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:epyc_7513:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "F8264DF4-47B4-4716-AE89-44AFA870D385"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:epyc_7453_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D1C80207-0203-44EB-B8E4-DBDD53786CEB",
"versionEndExcluding": "milanpi-sp3_1.0.0.7"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:epyc_7453:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "241E39FF-FE66-444C-A4C2-3D28C45341BE"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:epyc_74f3_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "84545E6A-E759-479C-93B7-65B172789853",
"versionEndExcluding": "milanpi-sp3_1.0.0.7"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:epyc_74f3:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "02D08121-DC57-47D7-8214-23A209F0AF08"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:epyc_7443p_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B0F1D942-1D5B-4C27-AE38-DF68F37A08E5",
"versionEndExcluding": "milanpi-sp3_1.0.0.7"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:epyc_7443p:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "8E2B13CA-72F4-4CF6-9E12-62E6E9056A14"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:epyc_7443_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E6C66D2D-BFCB-430C-8A18-FC3C21D2BD40",
"versionEndExcluding": "milanpi-sp3_1.0.0.7"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:epyc_7443:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "4C474537-3006-41BA-8C3D-5C370E3ACECD"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:epyc_7413_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D96D652C-BAC8-4975-BA8C-D4C0F707668F",
"versionEndExcluding": "milanpi-sp3_1.0.0.7"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:epyc_7413:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "D1766FF1-77A9-4293-B826-F6A8FBD7AFBF"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:epyc_73f3_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "05E3DEC2-7F6B-4520-8A02-C12948E1C65F",
"versionEndExcluding": "milanpi-sp3_1.0.0.7"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:epyc_73f3:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "678C5F58-8AE9-46FF-8F01-4CF394C87A2C"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:epyc_7343_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AB8E726E-ABB6-4A99-9834-CF16BA125598",
"versionEndExcluding": "milanpi-sp3_1.0.0.7"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:epyc_7343:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "71B9C24B-2C10-4826-A91B-E1C60665FBBE"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:epyc_7313p_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "20F6AA60-E573-4034-BDCF-5C558DFB4BF5",
"versionEndExcluding": "milanpi-sp3_1.0.0.7"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:epyc_7313p:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "9000686A-DC2B-4561-9C32-E90890EB2EBA"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:epyc_7313_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "31595722-F102-447D-9BAE-9C36567342DD",
"versionEndExcluding": "milanpi-sp3_1.0.0.7"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:epyc_7313:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "B02B61B7-7DD3-4164-8D32-EB961E981BC9"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:epyc_72f3_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "35815993-4C33-4039-8CB4-C60A955980AE",
"versionEndExcluding": "milanpi-sp3_1.0.0.7"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:epyc_72f3:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "7F98FF1A-3A2B-4CED-AEA2-9C4F2AC2D8C1"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:epyc_7773x_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "954923A7-7AAD-474E-919A-B17F11B01DA0",
"versionEndExcluding": "milanpi-sp3_1.0.0.7"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:epyc_7773x:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "D02B1C69-BAA4-485B-BE22-46BE321F9E4E"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:epyc_7473x_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EEB3E11E-F0DB-4A4E-BEED-7C24EEBF6271",
"versionEndExcluding": "milanpi-sp3_1.0.0.7"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:epyc_7473x:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "D07E922F-C1AB-469C-A1C1-9F9E58332DFC"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:epyc_7573x_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "789DECC1-7334-4252-8801-EE1269687F87",
"versionEndExcluding": "milanpi-sp3_1.0.0.7"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:epyc_7573x:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "237FB33B-BF08-4E3E-8E83-EB0AD2F12A4B"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:amd:epyc_7373x_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2786E500-3840-428E-8B2B-A7FBB636F41F",
"versionEndExcluding": "milanpi-sp3_1.0.0.7"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:epyc_7373x:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "180B3002-B3C5-48B5-8322-5B64B237C5B9"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"sourceIdentifier": "psirt@amd.com"
}