Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2021-46775


Improper input validation in ABL may enable an attacker with physical access, to perform arbitrary memory overwrites, potentially leading to a loss of integrity and code execution.


Security Impact Summary

This vulnerability carries a MEDIUM severity rating with a CVSS v3.1 score of 6.8, with relatively low complexity without requiring user interaction and does not require pre-existing privileges . The vulnerability impacts confidentiality (data exposure), integrity (unauthorized modifications), and availability (service disruption) for affected systems. Impacting 96 products from amd, from amd, from amd and 93 others, organizations running these solutions should prioritize assessment and patching.

Historical Context

Reported in 2023, this vulnerability emerged during an era marked by increased sophistication in supply chain attacks, cloud infrastructure vulnerabilities, and software-as-a-service (SaaS) security challenges. Security practices during this period emphasized zero-trust architectures, container security, and API protection.


Published

2023-05-09T19:15:11.240

Last Modified

2025-01-28T16:15:32.910

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 6.8 (MEDIUM)

Weaknesses
  • Type: Primary
    CWE-20

Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System amd epyc_72f3_firmware milanpi_1.0.0.9 Yes
Hardware amd epyc_72f3 - No
Operating System amd epyc_7313_firmware milanpi_1.0.0.9 Yes
Hardware amd epyc_7313 - No
Operating System amd epyc_7313p_firmware milanpi_1.0.0.9 Yes
Hardware amd epyc_7313p - No
Operating System amd epyc_7343_firmware milanpi_1.0.0.9 Yes
Hardware amd epyc_7343 - No
Operating System amd epyc_7373x_firmware milanpi_1.0.0.9 Yes
Hardware amd epyc_7373x - No
Operating System amd epyc_73f3_firmware milanpi_1.0.0.9 Yes
Hardware amd epyc_73f3 - No
Operating System amd epyc_7413_firmware milanpi_1.0.0.9 Yes
Hardware amd epyc_7413 - No
Operating System amd epyc_7443_firmware milanpi_1.0.0.9 Yes
Hardware amd epyc_7443 - No
Operating System amd epyc_7443p_firmware milanpi_1.0.0.9 Yes
Hardware amd epyc_7443p - No
Operating System amd epyc_7453_firmware milanpi_1.0.0.9 Yes
Hardware amd epyc_7453 - No
Operating System amd epyc_7473x_firmware milanpi_1.0.0.9 Yes
Hardware amd epyc_7473x - No
Operating System amd epyc_74f3_firmware milanpi_1.0.0.9 Yes
Hardware amd epyc_74f3 - No
Operating System amd epyc_7513_firmware milanpi_1.0.0.9 Yes
Hardware amd epyc_7513 - No
Operating System amd epyc_7543_firmware milanpi_1.0.0.9 Yes
Hardware amd epyc_7543 - No
Operating System amd epyc_7543p_firmware milanpi_1.0.0.9 Yes
Hardware amd epyc_7543p - No
Operating System amd epyc_7573x_firmware milanpi_1.0.0.9 Yes
Hardware amd epyc_7573x - No
Operating System amd epyc_75f3_firmware milanpi_1.0.0.9 Yes
Hardware amd epyc_75f3 - No
Operating System amd epyc_7643_firmware milanpi_1.0.0.9 Yes
Hardware amd epyc_7643 - No
Operating System amd epyc_7663_firmware milanpi_1.0.0.9 Yes
Hardware amd epyc_7663 - No
Operating System amd epyc_7713_firmware milanpi_1.0.0.9 Yes
Hardware amd epyc_7713 - No
Operating System amd epyc_7713p_firmware milanpi_1.0.0.9 Yes
Hardware amd epyc_7713p - No
Operating System amd epyc_7763_firmware milanpi_1.0.0.9 Yes
Hardware amd epyc_7763 - No
Operating System amd epyc_7773x_firmware milanpi_1.0.0.9 Yes
Hardware amd epyc_7773x - No
Operating System amd epyc_7232p_firmware romepi_1.0.0.e Yes
Hardware amd epyc_7232p - No
Operating System amd epyc_7252_firmware romepi_1.0.0.e Yes
Hardware amd epyc_7252 - No
Operating System amd epyc_7262_firmware romepi_1.0.0.e Yes
Hardware amd epyc_7262 - No
Operating System amd epyc_7272_firmware romepi_1.0.0.e Yes
Hardware amd epyc_7272 - No
Operating System amd epyc_7282_firmware romepi_1.0.0.e Yes
Hardware amd epyc_7282 - No
Operating System amd epyc_7302_firmware romepi_1.0.0.e Yes
Hardware amd epyc_7302 - No
Operating System amd epyc_7302p_firmware romepi_1.0.0.e Yes
Hardware amd epyc_7302p - No
Operating System amd epyc_7352_firmware romepi_1.0.0.e Yes
Hardware amd epyc_7352 - No
Operating System amd epyc_7402_firmware romepi_1.0.0.e Yes
Hardware amd epyc_7402 - No
Operating System amd epyc_7402p_firmware romepi_1.0.0.e Yes
Hardware amd epyc_7402p - No
Operating System amd epyc_7452_firmware romepi_1.0.0.e Yes
Hardware amd epyc_7452 - No
Operating System amd epyc_7502_firmware romepi_1.0.0.e Yes
Hardware amd epyc_7502 - No
Operating System amd epyc_7502p_firmware romepi_1.0.0.e Yes
Hardware amd epyc_7502p - No
Operating System amd epyc_7532_firmware romepi_1.0.0.e Yes
Hardware amd epyc_7532 - No
Operating System amd epyc_7542_firmware romepi_1.0.0.e Yes
Hardware amd epyc_7542 - No
Operating System amd epyc_7552_firmware romepi_1.0.0.e Yes
Hardware amd epyc_7552 - No
Operating System amd epyc_7642_firmware romepi_1.0.0.e Yes
Hardware amd epyc_7642 - No
Operating System amd epyc_7662_firmware romepi_1.0.0.e Yes
Hardware amd epyc_7662 - No
Operating System amd epyc_7702_firmware romepi_1.0.0.e Yes
Hardware amd epyc_7702 - No
Operating System amd epyc_7702p_firmware romepi_1.0.0.e Yes
Hardware amd epyc_7702p - No
Operating System amd epyc_7742_firmware romepi_1.0.0.e Yes
Hardware amd epyc_7742 - No
Operating System amd epyc_7f32_firmware romepi_1.0.0.e Yes
Hardware amd epyc_7f32 - No
Operating System amd epyc_7f52_firmware romepi_1.0.0.e Yes
Hardware amd epyc_7f52 - No
Operating System amd epyc_7f72_firmware romepi_1.0.0.e Yes
Hardware amd epyc_7f72 - No
Operating System amd epyc_7h12_firmware romepi_1.0.0.e Yes
Hardware amd epyc_7h12 - No

References

How SecUtils Interprets This CVE

SecUtils normalizes and enriches National Vulnerability Database (NVD) records by standardizing vendor and product identifiers, aggregating vulnerability metadata from both NVD and MITRE sources, and providing structured context for security teams. For amd's affected products, we extract Common Platform Enumeration (CPE) data, Common Weakness Enumeration (CWE) classifications, CVSS severity metrics, and reference data to enable rapid vulnerability prioritization and asset correlation. This record contains no exploit code, proof-of-concept instructions, or attack methodologies—only defensive intelligence necessary for patch management, risk assessment, and security operations.