Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2021-26408

Insufficient validation of elliptic curve points in SEV-legacy firmware may compromise SEV-legacy guest migration potentially resulting in loss of guest's integrity or confidentiality.

Published

2022-05-10T19:15:08.920

Last Modified

2024-11-21T05:56:19.170

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.1 (HIGH)

CVSSv2 Vector

AV:L/AC:L/Au:N/C:C/I:C/A:N

  • Access Vector: LOCAL
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: COMPLETE
  • Integrity Impact: COMPLETE
  • Availability Impact: NONE
Exploitability Score

3.9

Impact Score

9.2

Weaknesses
  • Type: Primary
    NVD-CWE-noinfo
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System amd epyc_7002_firmware < romepi-sp3_1.0.0.c Yes
Hardware amd epyc_7002 - No
Operating System amd epyc_7001_firmware < naplespi-sp3_1.0.0.g Yes
Hardware amd epyc_7001 - No
Operating System amd epyc_7232p_firmware < romepi-sp3_1.0.0.c Yes
Hardware amd epyc_7232p - No
Operating System amd epyc_7252_firmware < romepi-sp3_1.0.0.c Yes
Hardware amd epyc_7252 - No
Operating System amd epyc_7262_firmware < romepi-sp3_1.0.0.c Yes
Hardware amd epyc_7262 - No
Operating System amd epyc_7272_firmware < romepi-sp3_1.0.0.c Yes
Hardware amd epyc_7272 - No
Operating System amd epyc_7282_firmware < romepi-sp3_1.0.0.c Yes
Hardware amd epyc_7282 - No
Operating System amd epyc_7302_firmware < romepi-sp3_1.0.0.c Yes
Hardware amd epyc_7302 - No
Operating System amd epyc_7302p_firmware < romepi-sp3_1.0.0.c Yes
Hardware amd epyc_7302p - No
Operating System amd epyc_7352_firmware < romepi-sp3_1.0.0.c Yes
Hardware amd epyc_7352 - No
Operating System amd epyc_7402_firmware < romepi-sp3_1.0.0.c Yes
Hardware amd epyc_7402 - No
Operating System amd epyc_7402p_firmware < romepi-sp3_1.0.0.c Yes
Hardware amd epyc_7402p - No
Operating System amd epyc_7452_firmware < romepi-sp3_1.0.0.c Yes
Hardware amd epyc_7452 - No
Operating System amd epyc_7502_firmware < romepi-sp3_1.0.0.c Yes
Hardware amd epyc_7502 - No
Operating System amd epyc_7502p_firmware < romepi-sp3_1.0.0.c Yes
Hardware amd epyc_7502p - No
Operating System amd epyc_7532_firmware < romepi-sp3_1.0.0.c Yes
Hardware amd epyc_7532 - No
Operating System amd epyc_7542_firmware < romepi-sp3_1.0.0.c Yes
Hardware amd epyc_7542 - No
Operating System amd epyc_7552_firmware < romepi-sp3_1.0.0.c Yes
Hardware amd epyc_7552 - No
Operating System amd epyc_7642_firmware < romepi-sp3_1.0.0.c Yes
Hardware amd epyc_7642 - No
Operating System amd epyc_7662_firmware < romepi-sp3_1.0.0.c Yes
Hardware amd epyc_7662 - No
Operating System amd epyc_7702_firmware < romepi-sp3_1.0.0.c Yes
Hardware amd epyc_7702 - No
Operating System amd epyc_7702p_firmware < romepi-sp3_1.0.0.c Yes
Hardware amd epyc_7702p - No
Operating System amd epyc_7742_firmware < romepi-sp3_1.0.0.c Yes
Hardware amd epyc_7742 - No
Operating System amd epyc_7f32_firmware < romepi-sp3_1.0.0.c Yes
Hardware amd epyc_7f32 - No
Operating System amd epyc_7f52_firmware < romepi-sp3_1.0.0.c Yes
Hardware amd epyc_7f52 - No
Operating System amd epyc_7f72_firmware < romepi-sp3_1.0.0.c Yes
Hardware amd epyc_7f72 - No
Operating System amd epyc_7251_firmware < naplespi-sp3_1.0.0.g Yes
Hardware amd epyc_7251 - No
Operating System amd epyc_7281_firmware < naplespi-sp3_1.0.0.g Yes
Hardware amd epyc_7281 - No
Operating System amd epyc_7301_firmware < naplespi-sp3_1.0.0.g Yes
Hardware amd epyc_7301 - No
Operating System amd epyc_7351_firmware < naplespi-sp3_1.0.0.g Yes
Hardware amd epyc_7351 - No
Operating System amd epyc_7351p_firmware < naplespi-sp3_1.0.0.g Yes
Hardware amd epyc_7351p - No
Operating System amd epyc_7401_firmware < naplespi-sp3_1.0.0.g Yes
Hardware amd epyc_7401 - No
Operating System amd epyc_7401p_firmware < naplespi-sp3_1.0.0.g Yes
Hardware amd epyc_7401p - No
Operating System amd epyc_7451_firmware < naplespi-sp3_1.0.0.g Yes
Hardware amd epyc_7451 - No
Operating System amd epyc_7501_firmware < naplespi-sp3_1.0.0.g Yes
Hardware amd epyc_7501 - No
Operating System amd epyc_7551_firmware < naplespi-sp3_1.0.0.g Yes
Hardware amd epyc_7551 - No
Operating System amd epyc_7551p_firmware < naplespi-sp3_1.0.0.g Yes
Hardware amd epyc_7551p - No
Operating System amd epyc_7601_firmware < naplespi-sp3_1.0.0.g Yes
Hardware amd epyc_7601 - No
References