CVE-2021-26320CWE-295

Insufficient validation of the AMD SEV Signing Key (ASK) in the SEND_START command in the SEV Firmware may allow a local authenticated attacker to perform a…

published November 16, 2021

CVSS
—
EPSS
0%
Percentile
7.8
In the wild
Unconfirmed
What it is

Insufficient validation of the AMD SEV Signing Key (ASK) in the SEND_START command in the SEV Firmware may allow a local authenticated attacker to perform a denial of service of the PSP

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00186 · 7.8th percentile
Weakness
CWE-295 · Improper Certificate Validation
Published
2021-11-16T18:05Z
EPSS history
Timeline
  • 16 NOV 18:05Z
    Insufficient validation of the AMD SEV Signing Key (ASK) in the SEND_START command in the SEV Firmware may allow a local authenticated attacker to perform a…
    cvelistv5