Improper Data Clearing in ASP Bootloader Affects AMD Products
CVE-2021-46766
2.5LOW
Key Information:
- Vendor
Amd
- Status
- Vendor
- CVE Published:
- 14 November 2023
What is CVE-2021-46766?
The ASP Bootloader from AMD has a vulnerability that arises from improper clearing of sensitive data. This flaw can allow a privileged attacker to access secret keys stored in the ASP SRAM, leading to potential confidentiality compromises. The issue underscores the importance of rigorous data management practices in hardware security to prevent unauthorized data access.
Affected Version(s)
4th Gen AMD EPYC™ Processors x86 various
AMD EPYC™ Embedded 9003 various
Ryzen™ Threadripper™ PRO 3000WX Series Processors “Chagall” WS x86 various