CVE-2021-26401
Medium
Published: 11 March 2022
Published
11 March 2022
Modified
21 November 2024
KEV Added
—
Patch
—
CVSS Score v3.1
5.6
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
EPSS Score
0.0013
32.2th percentile
Risk Priority
11
60% EPSS · 20% KEV · 20% CVSS
Summary
CVE-2021-26401 is a medium-severity an unspecified weakness vulnerability in Amd Athlon X4 940 Firmware. Its CVSS base score is 5.6 (Medium).
Operationally, ranked at the 32.2th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2021-13207
Vulnerability details
LFENCE/JMP (mitigation V2-2) may not sufficiently mitigate CVE-2017-5715 on some AMD CPUs.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
amd
athlon x4 940 firmware
all versions
amd
athlon x4 950 firmware
all versions
amd
athlon x4 970 firmware
all versions
amd
athlon x4 835 firmware
all versions
amd
athlon x4 845 firmware
all versions
amd
athlon x4 830 firmware
all versions
amd
athlon x4 840 firmware
all versions
amd
athlon x4 860k firmware
all versions
amd
athlon x4 870k firmware
all versions
amd
athlon x4 880k firmware
all versions
+116 more product configuration(s) — see NVD for full list
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.