Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2021-46774


Insufficient DRAM address validation in System Management Unit (SMU) may allow an attacker to read/write from/to an invalid DRAM address, potentially resulting in denial-of-service.


Security Impact Summary

This vulnerability carries a MEDIUM severity rating with a CVSS v3.1 score of 6.7, requiring local system access to exploit but requires specific conditions to be met without requiring user interaction . The vulnerability impacts limited data confidentiality, integrity (unauthorized modifications), and limited availability for affected systems. Impacting 274 products from amd, from amd, from amd and 271 others, organizations running these solutions should prioritize assessment and patching.

Historical Context

Reported in 2023, this vulnerability emerged during an era marked by increased sophistication in supply chain attacks, cloud infrastructure vulnerabilities, and software-as-a-service (SaaS) security challenges. Security practices during this period emphasized zero-trust architectures, container security, and API protection.


Published

2023-11-14T19:15:10.407

Last Modified

2024-11-21T06:34:41.667

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 6.7 (MEDIUM)

Weaknesses
  • Type: Primary
    NVD-CWE-noinfo

Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System amd epyc_7001_firmware < naplespi_1.0.0.k Yes
Hardware amd epyc_7001 - No
Operating System amd epyc_7251_firmware < naplespi_1.0.0.k Yes
Hardware amd epyc_7251 - No
Operating System amd epyc_7261_firmware < naplespi_1.0.0.k Yes
Hardware amd epyc_7261 - No
Operating System amd epyc_7281_firmware < naplespi_1.0.0.k Yes
Hardware amd epyc_7281 - No
Operating System amd epyc_7301_firmware < naplespi_1.0.0.k Yes
Hardware amd epyc_7301 - No
Operating System amd epyc_7351_firmware < naplespi_1.0.0.k Yes
Hardware amd epyc_7351 - No
Operating System amd epyc_7351p_firmware < naplespi_1.0.0.k Yes
Hardware amd epyc_7351p - No
Operating System amd epyc_7371_firmware < naplespi_1.0.0.k Yes
Hardware amd epyc_7371 - No
Operating System amd epyc_7401_firmware < naplespi_1.0.0.k Yes
Hardware amd epyc_7401 - No
Operating System amd epyc_7401p_firmware < naplespi_1.0.0.k Yes
Hardware amd epyc_7401p - No
Operating System amd epyc_7451_firmware < naplespi_1.0.0.k Yes
Hardware amd epyc_7451 - No
Operating System amd epyc_7501_firmware < naplespi_1.0.0.k Yes
Hardware amd epyc_7501 - No
Operating System amd epyc_7551_firmware < naplespi_1.0.0.k Yes
Hardware amd epyc_7551 - No
Operating System amd epyc_7551p_firmware < naplespi_1.0.0.k Yes
Hardware amd epyc_7551p - No
Operating System amd epyc_7601_firmware < naplespi_1.0.0.k Yes
Hardware amd epyc_7601 - No
Operating System amd epyc_7232p_firmware < romepi_1.0.0.g Yes
Hardware amd epyc_7232p - No
Operating System amd epyc_7252_firmware < romepi_1.0.0.g Yes
Hardware amd epyc_7252 - No
Operating System amd epyc_7262_firmware < romepi_1.0.0.g Yes
Hardware amd epyc_7262 - No
Operating System amd epyc_7272_firmware < romepi_1.0.0.g Yes
Hardware amd epyc_7272 - No
Operating System amd epyc_7282_firmware < romepi_1.0.0.g Yes
Hardware amd epyc_7282 - No
Operating System amd epyc_7302_firmware < romepi_1.0.0.g Yes
Hardware amd epyc_7302 - No
Operating System amd epyc_7302p_firmware < romepi_1.0.0.g Yes
Hardware amd epyc_7302p - No
Operating System amd epyc_7352_firmware < romepi_1.0.0.g Yes
Hardware amd epyc_7352 - No
Operating System amd epyc_7402_firmware < romepi_1.0.0.g Yes
Hardware amd epyc_7402 - No
Operating System amd epyc_7402p_firmware < romepi_1.0.0.g Yes
Hardware amd epyc_7402p - No
Operating System amd epyc_7452_firmware < romepi_1.0.0.g Yes
Hardware amd epyc_7452 - No
Operating System amd epyc_7502_firmware < romepi_1.0.0.g Yes
Hardware amd epyc_7502 - No
Operating System amd epyc_7502p_firmware < romepi_1.0.0.g Yes
Hardware amd epyc_7502p - No
Operating System amd epyc_7532_firmware < romepi_1.0.0.g Yes
Hardware amd epyc_7532 - No
Operating System amd epyc_7542_firmware < romepi_1.0.0.g Yes
Hardware amd epyc_7542 - No
Operating System amd epyc_7552_firmware < romepi_1.0.0.g Yes
Hardware amd epyc_7552 - No
Operating System amd epyc_7642_firmware < romepi_1.0.0.g Yes
Hardware amd epyc_7642 - No
Operating System amd epyc_7662_firmware < romepi_1.0.0.g Yes
Hardware amd epyc_7662 - No
Operating System amd epyc_7702_firmware < romepi_1.0.0.g Yes
Hardware amd epyc_7702 - No
Operating System amd epyc_7702p_firmware < romepi_1.0.0.g Yes
Hardware amd epyc_7702p - No
Operating System amd epyc_7742_firmware < romepi_1.0.0.g Yes
Hardware amd epyc_7742 - No
Operating System amd epyc_7f32_firmware < romepi_1.0.0.g Yes
Hardware amd epyc_7f32 - No
Operating System amd epyc_7f52_firmware < romepi_1.0.0.g Yes
Hardware amd epyc_7f52 - No
Operating System amd epyc_7f72_firmware < romepi_1.0.0.g Yes
Hardware amd epyc_7f72 - No
Operating System amd epyc_7h12_firmware < romepi_1.0.0.g Yes
Hardware amd epyc_7h12 - No
Operating System amd epyc_7763_firmware < milanpi_1.0.0.b Yes
Hardware amd epyc_7763 - No
Operating System amd epyc_7713p_firmware < milanpi_1.0.0.b Yes
Hardware amd epyc_7713p - No
Operating System amd epyc_7713_firmware < milanpi_1.0.0.b Yes
Hardware amd epyc_7713 - No
Operating System amd epyc_7663p_firmware < milanpi_1.0.0.b Yes
Hardware amd epyc_7663p - No
Operating System amd epyc_7663_firmware < milanpi_1.0.0.b Yes
Hardware amd epyc_7663 - No
Operating System amd epyc_7643p_firmware < milanpi_1.0.0.b Yes
Hardware amd epyc_7643p - No
Operating System amd epyc_7773x_firmware < milanpi_1.0.0.b Yes
Hardware amd epyc_7773x - No
Operating System amd epyc_7643_firmware < milanpi_1.0.0.b Yes
Hardware amd epyc_7643 - No
Operating System amd epyc_7573x_firmware < milanpi_1.0.0.b Yes
Hardware amd epyc_7573x - No
Operating System amd epyc_75f3_firmware < milanpi_1.0.0.b Yes
Hardware amd epyc_75f3 - No
Operating System amd epyc_7543p_firmware < milanpi_1.0.0.b Yes
Hardware amd epyc_7543p - No
Operating System amd epyc_7543_firmware < milanpi_1.0.0.b Yes
Hardware amd epyc_7543 - No
Operating System amd epyc_7513_firmware < milanpi_1.0.0.b Yes
Hardware amd epyc_7513 - No
Operating System amd epyc_7473x_firmware < milanpi_1.0.0.b Yes
Hardware amd epyc_7473x - No
Operating System amd epyc_7453_firmware < milanpi_1.0.0.b Yes
Hardware amd epyc_7453 - No
Operating System amd epyc_74f3_firmware < milanpi_1.0.0.b Yes
Hardware amd epyc_74f3 - No
Operating System amd epyc_7443p_firmware < milanpi_1.0.0.b Yes
Hardware amd epyc_7443p - No
Operating System amd epyc_7443_firmware < milanpi_1.0.0.b Yes
Hardware amd epyc_7443 - No
Operating System amd epyc_7413_firmware < milanpi_1.0.0.b Yes
Hardware amd epyc_7413 - No
Operating System amd epyc_7373x_firmware < milanpi_1.0.0.b Yes
Hardware amd epyc_7373x - No
Operating System amd epyc_73f3_firmware < milanpi_1.0.0.b Yes
Hardware amd epyc_73f3 - No
Operating System amd epyc_7343_firmware < milanpi_1.0.0.b Yes
Hardware amd epyc_7343 - No
Operating System amd epyc_7313p_firmware < milanpi_1.0.0.b Yes
Hardware amd epyc_7313p - No
Operating System amd epyc_7313_firmware < milanpi_1.0.0.b Yes
Hardware amd epyc_7313 - No
Operating System amd epyc_7303p_firmware < milanpi_1.0.0.b Yes
Hardware amd epyc_7303p - No
Operating System amd epyc_7303_firmware < milanpi_1.0.0.b Yes
Hardware amd epyc_7303 - No
Operating System amd epyc_72f3_firmware < milanpi_1.0.0.b Yes
Hardware amd epyc_72f3 - No
Operating System amd epyc_7203p_firmware < milanpi_1.0.0.b Yes
Hardware amd epyc_7203p - No
Operating System amd epyc_7203_firmware < milanpi_1.0.0.b Yes
Hardware amd epyc_7203 - No
Operating System amd epyc_9654p_firmware < genoapi_1.0.0.8 Yes
Hardware amd epyc_9654p - No
Operating System amd epyc_9654_firmware < genoapi_1.0.0.8 Yes
Hardware amd epyc_9654 - No
Operating System amd epyc_9634_firmware < genoapi_1.0.0.8 Yes
Hardware amd epyc_9634 - No
Operating System amd epyc_9554p_firmware < genoapi_1.0.0.8 Yes
Hardware amd epyc_9554p - No
Operating System amd epyc_9554_firmware < genoapi_1.0.0.8 Yes
Hardware amd epyc_9554 - No
Operating System amd epyc_9534_firmware < genoapi_1.0.0.8 Yes
Hardware amd epyc_9534 - No
Operating System amd epyc_9474f_firmware < genoapi_1.0.0.8 Yes
Hardware amd epyc_9474f - No
Operating System amd epyc_9454p_firmware < genoapi_1.0.0.8 Yes
Hardware amd epyc_9454p - No
Operating System amd epyc_9454_firmware < genoapi_1.0.0.8 Yes
Hardware amd epyc_9454 - No
Operating System amd epyc_9374f_firmware < genoapi_1.0.0.8 Yes
Hardware amd epyc_9374f - No
Operating System amd epyc_9354p_firmware < genoapi_1.0.0.8 Yes
Hardware amd epyc_9354p - No
Operating System amd epyc_9354_firmware < genoapi_1.0.0.8 Yes
Hardware amd epyc_9354 - No
Operating System amd epyc_9334_firmware < genoapi_1.0.0.8 Yes
Hardware amd epyc_9334 - No
Operating System amd epyc_9274f_firmware < genoapi_1.0.0.8 Yes
Hardware amd epyc_9274f - No
Operating System amd epyc_9254_firmware < genoapi_1.0.0.8 Yes
Hardware amd epyc_9254 - No
Operating System amd epyc_9224_firmware < genoapi_1.0.0.8 Yes
Hardware amd epyc_9224 - No
Operating System amd epyc_9174f_firmware < genoapi_1.0.0.8 Yes
Hardware amd epyc_9174f - No
Operating System amd epyc_9124_firmware < genoapi_1.0.0.8 Yes
Hardware amd epyc_9124 - No
Operating System amd epyc_9684x_firmware < genoapi_1.0.0.8 Yes
Hardware amd epyc_9684x - No
Operating System amd epyc_9384x_firmware < genoapi_1.0.0.8 Yes
Hardware amd epyc_9384x - No
Operating System amd epyc_9184x_firmware < genoapi_1.0.0.8 Yes
Hardware amd epyc_9184x - No
Operating System amd epyc_9754_firmware < genoapi_1.0.0.8 Yes
Hardware amd epyc_9754 - No
Operating System amd epyc_9754s_firmware < genoapi_1.0.0.8 Yes
Hardware amd epyc_9754s - No
Operating System amd epyc_9734_firmware < genoapi_1.0.0.8 Yes
Hardware amd epyc_9734 - No
Operating System amd epyc_8534p_firmware < genoapi_1.0.0.8 Yes
Hardware amd epyc_8534p - No
Operating System amd epyc_8534pn_firmware < genoapi_1.0.0.8 Yes
Hardware amd epyc_8534pn - No
Operating System amd epyc_8434p_firmware < genoapi_1.0.0.8 Yes
Hardware amd epyc_8434p - No
Operating System amd epyc_8434pn_firmware < genoapi_1.0.0.8 Yes
Hardware amd epyc_8434pn - No
Operating System amd epyc_8324p_firmware < genoapi_1.0.0.8 Yes
Hardware amd epyc_8324p - No
Operating System amd epyc_8324pn_firmware < genoapi_1.0.0.8 Yes
Hardware amd epyc_8324pn - No
Operating System amd epyc_8224p_firmware < genoapi_1.0.0.8 Yes
Hardware amd epyc_8224p - No
Operating System amd epyc_8224pn_firmware < genoapi_1.0.0.8 Yes
Hardware amd epyc_8224pn - No
Operating System amd epyc_8124p_firmware < genoapi_1.0.0.8 Yes
Hardware amd epyc_8124p - No
Operating System amd epyc_8124pn_firmware < genoapi_1.0.0.8 Yes
Hardware amd epyc_8124pn - No
Operating System amd epyc_8024p_firmware < genoapi_1.0.0.8 Yes
Hardware amd epyc_8024p - No
Operating System amd epyc_8024pn_firmware < genoapi_1.0.0.8 Yes
Hardware amd epyc_8024pn - No
Operating System amd ryzen_9_3950x_firmware - Yes
Hardware amd ryzen_9_3950x - No
Operating System amd ryzen_9_3950xt_firmware - Yes
Hardware amd ryzen_9_3950xt - No
Operating System amd ryzen_9_3900_firmware - Yes
Hardware amd ryzen_9_3900 - No
Operating System amd ryzen_9_3900x_firmware - Yes
Hardware amd ryzen_9_3900x - No
Operating System amd ryzen_7_3800x_firmware - Yes
Hardware amd ryzen_7_3800x - No
Operating System amd ryzen_7_3800xt_firmware - Yes
Hardware amd ryzen_7_3800xt - No
Operating System amd ryzen_7_3700xt_firmware - Yes
Hardware amd ryzen_7_3700xt - No
Operating System amd ryzen_5_3600x_firmware - Yes
Hardware amd ryzen_5_3600x - No
Operating System amd ryzen_5_3600xt_firmware - Yes
Hardware amd ryzen_5_3600xt - No
Operating System amd ryzen_5_3600_firmware - Yes
Hardware amd ryzen_5_3600 - No
Operating System amd ryzen_5_3500x_firmware - Yes
Hardware amd ryzen_5_3500x - No
Operating System amd ryzen_5_3500_firmware - Yes
Hardware amd ryzen_5_3500 - No
Operating System amd ryzen_3_3300x_firmware - Yes
Hardware amd ryzen_3_3300x - No
Operating System amd ryzen_3_3100_firmware - Yes
Hardware amd ryzen_3_3100 - No
Operating System amd ryzen_9_5950x_firmware < comboam4_v2_pi_1.2.0.6 Yes
Hardware amd ryzen_9_5950x - No
Operating System amd ryzen_9_5900x_firmware < comboam4_v2_pi_1.2.0.6 Yes
Hardware amd ryzen_9_5900x - No
Operating System amd ryzen_9_5900_firmware < comboam4_v2_pi_1.2.0.6 Yes
Hardware amd ryzen_9_5900 - No
Operating System amd ryzen_7_5800x3d_firmware < comboam4_v2_pi_1.2.0.6 Yes
Hardware amd ryzen_7_5800x3d - No
Operating System amd ryzen_7_5800x_firmware < comboam4_v2_pi_1.2.0.6 Yes
Hardware amd ryzen_7_5800x - No
Operating System amd ryzen_7_5800_firmware < comboam4_v2_pi_1.2.0.6 Yes
Hardware amd ryzen_7_5800 - No
Operating System amd ryzen_7_5700x_firmware < comboam4_v2_pi_1.2.0.6 Yes
Hardware amd ryzen_7_5700x - No
Operating System amd ryzen_5_5600_firmware < comboam4_v2_pi_1.2.0.6 Yes
Hardware amd ryzen_5_5600 - No
Operating System amd ryzen_5_5600x_firmware < comboam4_v2_pi_1.2.0.6 Yes
Hardware amd ryzen_5_5600x - No
Operating System amd ryzen_5_5500_firmware < comboam4_v2_pi_1.2.0.6 Yes
Hardware amd ryzen_5_5500 - No
Operating System amd ryzen_threadripper_3960x_firmware < castlepeakpi-sp3r3_1.0.0.7 Yes
Hardware amd ryzen_threadripper_3960x - No
Operating System amd ryzen_threadripper_3970x_firmware < castlepeakpi-sp3r3_1.0.0.7 Yes
Hardware amd ryzen_threadripper_3970x - No
Operating System amd ryzen_threadripper_3990x_firmware < castlepeakpi-sp3r3_1.0.0.7 Yes
Hardware amd ryzen_threadripper_3990x - No
Operating System amd ryzen_threadripper_pro_3945wx_firmware - Yes
Hardware amd ryzen_threadripper_pro_3945wx - No
Operating System amd ryzen_threadripper_pro_3955wx_firmware - Yes
Hardware amd ryzen_threadripper_pro_3955wx - No
Operating System amd ryzen_threadripper_pro_3975wx_firmware - Yes
Hardware amd ryzen_threadripper_pro_3975wx - No
Operating System amd ryzen_threadripper_pro_3995wx_firmware - Yes
Hardware amd ryzen_threadripper_pro_3995wx - No
Operating System amd ryzen_threadripper_pro_3795wx_firmware < chagallwspi-swrx8_1.0.0.0 Yes
Hardware amd ryzen_threadripper_pro_3795wx - No

References

How SecUtils Interprets This CVE

SecUtils normalizes and enriches National Vulnerability Database (NVD) records by standardizing vendor and product identifiers, aggregating vulnerability metadata from both NVD and MITRE sources, and providing structured context for security teams. For amd's affected products, we extract Common Platform Enumeration (CPE) data, Common Weakness Enumeration (CWE) classifications, CVSS severity metrics, and reference data to enable rapid vulnerability prioritization and asset correlation. This record contains no exploit code, proof-of-concept instructions, or attack methodologies—only defensive intelligence necessary for patch management, risk assessment, and security operations.