CVE-2024-21981

Improper key usage control in AMD Secure Processor (ASP) may allow an attacker with local access who has gained arbitrary code execution privilege in…

Medium · published August 13, 2024

CVSS v3.1
5.7
EPSS
0%
Percentile
2.8
In the wild
Unconfirmed
What it is

Improper key usage control in AMD Secure Processor

(ASP) may allow an attacker with local access who has gained arbitrary code

execution privilege in ASP to

extract ASP cryptographic keys, potentially resulting in loss of

confidentiality and integrity.

The record
Technical detail
CVSS v3.1
5.7 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00136 · 2.8th percentile
Published
2024-08-13T16:54Z
EPSS history
Timeline
  • 13 AUG 16:54Z
    Improper key usage control in AMD Secure Processor (ASP) may allow an attacker with local access who has gained arbitrary code execution privilege in…
    cvelistv5