Medium severity5.5NVD Advisory· Published Jan 11, 2023· Updated Jun 17, 2026

CVE-2021-26343

Description

Insufficient validation in ASP BIOS and DRTM commands may allow malicious supervisor x86 software to disclose the contents of sensitive memory which may result in information disclosure.

Affected products

AMD/Epyc 7003 Firmware
cpe:2.3:o:amd:epyc_7003_firmware:*:*:*:*:*:*:*:*
Range: <milanpi_1.0.0.3
AMD/Epyc 72f3 Firmware
cpe:2.3:o:amd:epyc_72f3_firmware:*:*:*:*:*:*:*:*
Range: <milanpi_1.0.0.3
AMD/Epyc 7313 Firmware
cpe:2.3:o:amd:epyc_7313_firmware:*:*:*:*:*:*:*:*
Range: <milanpi_1.0.0.3
AMD/Epyc 7313p Firmware
cpe:2.3:o:amd:epyc_7313p_firmware:*:*:*:*:*:*:*:*
Range: <milanpi_1.0.0.3
AMD/Epyc 7343 Firmware
cpe:2.3:o:amd:epyc_7343_firmware:*:*:*:*:*:*:*:*
Range: <milanpi_1.0.0.3
AMD/Epyc 7373x Firmware
cpe:2.3:o:amd:epyc_7373x_firmware:*:*:*:*:*:*:*:*
Range: <milanpi_1.0.0.3
AMD/Epyc 73f3 Firmware
cpe:2.3:o:amd:epyc_73f3_firmware:*:*:*:*:*:*:*:*
Range: <milanpi_1.0.0.3
AMD/Epyc 7413 Firmware
cpe:2.3:o:amd:epyc_7413_firmware:*:*:*:*:*:*:*:*
Range: <milanpi_1.0.0.3
AMD/Epyc 7443 Firmware
cpe:2.3:o:amd:epyc_7443_firmware:*:*:*:*:*:*:*:*
Range: <milanpi_1.0.0.3
AMD/Epyc 7443p Firmware
cpe:2.3:o:amd:epyc_7443p_firmware:*:*:*:*:*:*:*:*
Range: <milanpi_1.0.0.3
AMD/Epyc 7453 Firmware
cpe:2.3:o:amd:epyc_7453_firmware:*:*:*:*:*:*:*:*
Range: <milanpi_1.0.0.3
AMD/Epyc 74f3 Firmware
cpe:2.3:o:amd:epyc_74f3_firmware:*:*:*:*:*:*:*:*
Range: <milanpi_1.0.0.3
AMD/Epyc 7513 Firmware
cpe:2.3:o:amd:epyc_7513_firmware:*:*:*:*:*:*:*:*
Range: <milanpi_1.0.0.3
AMD/Epyc 7543 Firmware
cpe:2.3:o:amd:epyc_7543_firmware:*:*:*:*:*:*:*:*
Range: <milanpi_1.0.0.3
AMD/Epyc 7543p Firmware
cpe:2.3:o:amd:epyc_7543p_firmware:*:*:*:*:*:*:*:*
Range: <milanpi_1.0.0.3
AMD/Epyc 7573x Firmware
cpe:2.3:o:amd:epyc_7573x_firmware:*:*:*:*:*:*:*:*
Range: <milanpi_1.0.0.3
AMD/Epyc 75f3 Firmware
cpe:2.3:o:amd:epyc_75f3_firmware:*:*:*:*:*:*:*:*
Range: <milanpi_1.0.0.3
AMD/Epyc 7643 Firmware
cpe:2.3:o:amd:epyc_7643_firmware:*:*:*:*:*:*:*:*
Range: <milanpi_1.0.0.3
AMD/Epyc 7663 Firmware
cpe:2.3:o:amd:epyc_7663_firmware:*:*:*:*:*:*:*:*
Range: <milanpi_1.0.0.3
AMD/Epyc 7713 Firmware
cpe:2.3:o:amd:epyc_7713_firmware:*:*:*:*:*:*:*:*
Range: <milanpi_1.0.0.3
AMD/Epyc 7713p Firmware
cpe:2.3:o:amd:epyc_7713p_firmware:*:*:*:*:*:*:*:*
Range: <milanpi_1.0.0.3
AMD/Epyc 7743 Firmware
cpe:2.3:o:amd:epyc_7743_firmware:*:*:*:*:*:*:*:*
Range: <milanpi_1.0.0.3
AMD/Epyc 7763 Firmware
cpe:2.3:o:amd:epyc_7763_firmware:*:*:*:*:*:*:*:*
Range: <milanpi_1.0.0.3
AMD/Epyc 7773x Firmware
cpe:2.3:o:amd:epyc_7773x_firmware:*:*:*:*:*:*:*:*
Range: <milanpi_1.0.0.3
AMD/ASP BIOS and DRTM commandsllm-create
AMD/3rd Gen EPYCv5
Range: various

Patches

Vulnerability mechanics

References

www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.358
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000