CVE-2021-46758
Medium
Published: 14 November 2023
Published
14 November 2023
Modified
21 November 2024
KEV Added
—
Patch
—
CVSS Score v3.1
6.1
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
EPSS Score
0.0010
27.2th percentile
Risk Priority
12
60% EPSS · 20% KEV · 20% CVSS
Summary
CVE-2021-46758 is a medium-severity an unspecified weakness vulnerability in Amd Ryzen 7 5700G Firmware. Its CVSS base score is 6.1 (Medium).
Operationally, ranked at the 27.2th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2021-33414
Vulnerability details
Insufficient validation of SPI flash addresses in the ASP (AMD Secure Processor) bootloader may allow an attacker to read data in memory mapped beyond SPI flash resulting in a potential loss of availability and integrity.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
amd
ryzen 7 5700g firmware
≤ comboam4v2_pi_1.2.0.8
amd
ryzen 7 5700ge firmware
≤ comboam4v2_pi_1.2.0.8
amd
ryzen 5 5600g firmware
≤ comboam4v2_pi_1.2.0.8
amd
ryzen 5 5600ge firmware
≤ comboam4v2_pi_1.2.0.8
amd
ryzen 3 5300g firmware
≤ comboam4v2_pi_1.2.0.8
amd
ryzen 3 5300ge firmware
≤ comboam4v2_pi_1.2.0.8
amd
ryzen 9 7950x3d firmware
≤ comboam5_1.0.0.1
amd
ryzen 9 7900x3d firmware
≤ comboam5_1.0.0.1
amd
ryzen 7 7800x3d firmware
≤ comboam5_1.0.0.1
amd
ryzen 9 4900h firmware
≤ renoirpi-fp6_1.0.0.a
+51 more product configuration(s) — see NVD for full list
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.