CVE-2021-46774
Published: Nov 14, 2023
Modified: Oct 11, 2024
CVSS v3.1
6.7
Description
Insufficient DRAM address validation in System Management Unit (SMU) may allow an attacker to read/write from/to an invalid DRAM address, potentially resulting in denial-of-service.
| Vendor | Product | Versions |
|---|---|---|
AMD | Ryzen™ 3000 series Desktop Processors “Matisse" | affected various |
AMD | AMD Ryzen™ 5000 Series Desktop Processors “Vermeer” | affected various |
AMD | AMD Ryzen™ Threadripper™ 3000 Series Processors “Castle Peak” HEDT | affected various |
AMD | AMD Ryzen™ Threadripper™ PRO Processors “Castle Peak” WS SP3 | affected various |
AMD | AMD Ryzen™ Threadripper™ PRO 3000WX Series Processors “Chagall” WS | affected various |
AMD | 1st Gen AMD EPYC™ Processors | affected various |
AMD | 2nd Gen AMD EPYC™ Processors | affected various |
AMD | 3rd Gen AMD EPYC™ Processors | affected various |
AMD | 4th Gen AMD EPYC™ Processors | affected various |
AMD | AMD EPYC™ Embedded 3000 | affected various |
AMD | AMD EPYC™ Embedded 7002 | affected various |
AMD | AMD EPYC™ Embedded 7003 | affected various |
AMD | AMD Ryzen™ Embedded 5000 | affected various |
AMD | AMD EPYC™ Embedded 7002 | affected various |
AMD | AMD EPYC™ Embedded 3000 | affected various |
AMD | AMD EPYC™ Embedded 7003 | affected various |
CVSS v3.1 Details
CVSS v3.1 Vector
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:H/A:L
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
References
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now