CVE-2021-46747CWE-1220

Insufficient granularity of access control in ASP (AMD Secure Processor) may allow an attacker with an untrusted user space application to map sensitive SMN…

High · published June 1, 2026

CVSS v4.0
7.1
EPSS
0%
Percentile
0.7
In the wild
Unconfirmed
What it is

Insufficient granularity of access control in ASP (AMD Secure Processor) may allow an attacker with an untrusted user space application to map sensitive SMN (System Management Network) apertures leading to a potential escalation of privileges.

The record
Technical detail
CVSS v4.0
7.1 · HIGH
Vector
CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00097 · 0.7th percentile
Weakness
CWE-1220 · Insufficient Granularity of Access Control
Published
2026-06-01T19:01Z
EPSS history
Timeline
  • 01 JUN 19:01Z
    Insufficient granularity of access control in ASP (AMD Secure Processor) may allow an attacker with an untrusted user space application to map sensitive SMN…
    cvelistv5