Low severity2.5NVD Advisory· Published Nov 14, 2023· Updated Jun 17, 2026

CVE-2021-46766

Description

Improper clearing of sensitive data in the ASP Bootloader may expose secret keys to a privileged attacker accessing ASP SRAM, potentially leading to a loss of confidentiality.

Affected products

AMD/Epyc 9124 Firmware
cpe:2.3:o:amd:epyc_9124_firmware:*:*:*:*:*:*:*:*
Range: <genoapi_1.0.0.4
AMD/Epyc 9174f Firmware
cpe:2.3:o:amd:epyc_9174f_firmware:*:*:*:*:*:*:*:*
Range: <genoapi_1.0.0.4
AMD/Epyc 9184x Firmware
cpe:2.3:o:amd:epyc_9184x_firmware:*:*:*:*:*:*:*:*
Range: <genoapi_1.0.0.4
AMD/Epyc 9224 Firmware
cpe:2.3:o:amd:epyc_9224_firmware:*:*:*:*:*:*:*:*
Range: <genoapi_1.0.0.4
AMD/Epyc 9254 Firmware
cpe:2.3:o:amd:epyc_9254_firmware:*:*:*:*:*:*:*:*
Range: <genoapi_1.0.0.4
AMD/Epyc 9274f Firmware
cpe:2.3:o:amd:epyc_9274f_firmware:*:*:*:*:*:*:*:*
Range: <genoapi_1.0.0.4
AMD/Epyc 9334 Firmware
cpe:2.3:o:amd:epyc_9334_firmware:*:*:*:*:*:*:*:*
Range: <genoapi_1.0.0.4
AMD/Epyc 9354 Firmware
cpe:2.3:o:amd:epyc_9354_firmware:*:*:*:*:*:*:*:*
Range: <genoapi_1.0.0.4
AMD/Epyc 9354p Firmware
cpe:2.3:o:amd:epyc_9354p_firmware:*:*:*:*:*:*:*:*
Range: <genoapi_1.0.0.4
AMD/Epyc 9374f Firmware
cpe:2.3:o:amd:epyc_9374f_firmware:*:*:*:*:*:*:*:*
Range: <genoapi_1.0.0.4
AMD/Epyc 9384x Firmware
cpe:2.3:o:amd:epyc_9384x_firmware:*:*:*:*:*:*:*:*
Range: <genoapi_1.0.0.4
AMD/Epyc 9454 Firmware
cpe:2.3:o:amd:epyc_9454_firmware:*:*:*:*:*:*:*:*
Range: <genoapi_1.0.0.4
AMD/Epyc 9454p Firmware
cpe:2.3:o:amd:epyc_9454p_firmware:*:*:*:*:*:*:*:*
Range: <genoapi_1.0.0.4
AMD/Epyc 9474f Firmware
cpe:2.3:o:amd:epyc_9474f_firmware:*:*:*:*:*:*:*:*
Range: <genoapi_1.0.0.4
AMD/Epyc 9534 Firmware
cpe:2.3:o:amd:epyc_9534_firmware:*:*:*:*:*:*:*:*
Range: <genoapi_1.0.0.4
AMD/Epyc 9554 Firmware
cpe:2.3:o:amd:epyc_9554_firmware:*:*:*:*:*:*:*:*
Range: <genoapi_1.0.0.4
AMD/Epyc 9554p Firmware
cpe:2.3:o:amd:epyc_9554p_firmware:*:*:*:*:*:*:*:*
Range: <genoapi_1.0.0.4
AMD/Epyc 9634 Firmware
cpe:2.3:o:amd:epyc_9634_firmware:*:*:*:*:*:*:*:*
Range: <genoapi_1.0.0.4
AMD/Epyc 9654 Firmware
cpe:2.3:o:amd:epyc_9654_firmware:*:*:*:*:*:*:*:*
Range: <genoapi_1.0.0.4
AMD/Epyc 9654p Firmware
cpe:2.3:o:amd:epyc_9654p_firmware:*:*:*:*:*:*:*:*
Range: <genoapi_1.0.0.4
AMD/Epyc 9684x Firmware
cpe:2.3:o:amd:epyc_9684x_firmware:*:*:*:*:*:*:*:*
Range: <genoapi_1.0.0.4
AMD/Epyc 9734 Firmware
cpe:2.3:o:amd:epyc_9734_firmware:*:*:*:*:*:*:*:*
Range: <genoapi_1.0.0.4
AMD/Epyc 9754 Firmware
cpe:2.3:o:amd:epyc_9754_firmware:*:*:*:*:*:*:*:*
Range: <genoapi_1.0.0.4
AMD/Epyc 9754s Firmware
cpe:2.3:o:amd:epyc_9754s_firmware:*:*:*:*:*:*:*:*
Range: <genoapi_1.0.0.4
AMD/Ryzen Threadripper Pro 3945wx Firmware
cpe:2.3:o:amd:ryzen_threadripper_pro_3945wx_firmware:*:*:*:*:*:*:*:*
Range: <chagallwspi-swrx8_1.0.0.5
AMD/Ryzen Threadripper Pro 3955wx Firmware
cpe:2.3:o:amd:ryzen_threadripper_pro_3955wx_firmware:*:*:*:*:*:*:*:*
Range: <chagallwspi-swrx8_1.0.0.5
AMD/Ryzen Threadripper Pro 3975wx Firmware
cpe:2.3:o:amd:ryzen_threadripper_pro_3975wx_firmware:*:*:*:*:*:*:*:*
Range: <chagallwspi-swrx8_1.0.0.5
AMD/Ryzen Threadripper Pro 3995wx Firmware
cpe:2.3:o:amd:ryzen_threadripper_pro_3995wx_firmware:*:*:*:*:*:*:*:*
Range: <chagallwspi-swrx8_1.0.0.5
AMD/ASP Bootloaderllm-fuzzy
osv-coords24 versions
pkg:rpm/opensuse/kernel-firmware&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/kernel-firmware&distro=openSUSE%20Leap%2015.5 pkg:rpm/opensuse/kernel-firmware&distro=openSUSE%20Leap%20Micro%205.3 pkg:rpm/opensuse/kernel-firmware&distro=openSUSE%20Leap%20Micro%205.4 pkg:rpm/suse/kernel-firmware&distro=SUSE%20Enterprise%20Storage%207.1 pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-LTSS pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSS pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-ESPOS pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSS pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20Micro%205.1 pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20Micro%205.2 pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20Micro%205.3 pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20Micro%205.4 pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20Micro%205.5 pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP4 pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP5 pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5 pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-LTSS pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSS pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSS pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5 pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP1 pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2 pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3
< 20220509-150400.4.25.1+ 23 more
- (no CPE)range: < 20220509-150400.4.25.1
- (no CPE)range: < 20230724-150500.3.9.1
- (no CPE)range: < 20220509-150400.4.25.1
- (no CPE)range: < 20220509-150400.4.25.1
- (no CPE)range: < 20210208-150300.4.19.1
- (no CPE)range: < 20200107-150100.3.40.1
- (no CPE)range: < 20200107-150100.3.40.1
- (no CPE)range: < 20210208-150300.4.19.1
- (no CPE)range: < 20210208-150300.4.19.1
- (no CPE)range: < 20210208-150300.4.19.1
- (no CPE)range: < 20210208-150300.4.19.1
- (no CPE)range: < 20220509-150400.4.25.1
- (no CPE)range: < 20220509-150400.4.25.1
- (no CPE)range: < 20230724-150500.3.9.1
- (no CPE)range: < 20220509-150400.4.25.1
- (no CPE)range: < 20230724-150500.3.9.1
- (no CPE)range: < 20190618-5.34.1
- (no CPE)range: < 20200107-150100.3.40.1
- (no CPE)range: < 20200107-150100.3.40.1
- (no CPE)range: < 20210208-150300.4.19.1
- (no CPE)range: < 20190618-5.34.1
- (no CPE)range: < 20200107-150100.3.40.1
- (no CPE)range: < 20200107-150100.3.40.1
- (no CPE)range: < 20210208-150300.4.19.1
AMD/EPYC Processorscpe-rescue
Range: various
AMD/AMD EPYC™ Embedded 9003v5
Range: various
AMD/Ryzen™ Threadripper™ PRO 3000WX Series Processors “Chagall” WSv5
Range: various

Patches

Vulnerability mechanics

References

www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3002nvdVendor Advisory
www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4002nvdVendor Advisory
www.amd.com/en/corporate/product-security/bulletin/AMD-SB-5001nvd

News mentions

No linked articles in our index yet.

cvss	0.163
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000