CVE-2021-26387

Insufficient access controls in ASP kernel may allow a privileged attacker with access to AMD signing keys and the BIOS menu or UEFI shell to map DRAM regions…

Low · published August 13, 2024

CVSS v3.1
3.9
EPSS
0%
Percentile
3.5
In the wild
Unconfirmed
What it is

Insufficient access controls in ASP kernel may allow a

privileged attacker with access to AMD signing keys and the BIOS menu or UEFI

shell to map DRAM regions in protected areas, potentially leading to a loss of platform integrity.

The record
Technical detail
CVSS v3.1
3.9 · LOW
Vector
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00146 · 3.5th percentile
Published
2024-08-13T16:50Z
EPSS history
Timeline
  • 13 AUG 16:50Z
    Insufficient access controls in ASP kernel may allow a privileged attacker with access to AMD signing keys and the BIOS menu or UEFI shell to map DRAM regions…
    cvelistv5