CVE-2021-26356

A TOCTOU in ASP bootloader may allow an attacker to tamper with the SPI ROM following data read to memory potentially resulting in S3 data corruption and…

High · published May 9, 2023

CVSS v3.1
7.4
EPSS
0%
Percentile
33.0
In the wild
Unconfirmed
What it is

A TOCTOU in ASP bootloader may allow an attacker

to tamper with the SPI ROM following data read to memory potentially resulting

in S3 data corruption and information disclosure.

The record
Technical detail
CVSS v3.1
7.4 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00399 · 33.0th percentile
Published
2023-05-09T18:58Z
EPSS history
Timeline
  • 09 MAY 18:58Z
    A TOCTOU in ASP bootloader may allow an attacker to tamper with the SPI ROM following data read to memory potentially resulting in S3 data corruption and…
    cvelistv5