156 lines
6.0 KiB
JSON
156 lines
6.0 KiB
JSON
{
|
||
"dataType": "CVE_RECORD",
|
||
"dataVersion": "5.1",
|
||
"cveMetadata": {
|
||
"state": "PUBLISHED",
|
||
"cveId": "CVE-2021-26360",
|
||
"assignerOrgId": "b58fc414-a1e4-4f92-9d70-1add41838648",
|
||
"assignerShortName": "AMD",
|
||
"datePublished": "2022-11-09T20:44:26.034Z",
|
||
"dateUpdated": "2025-05-01T14:12:12.910Z",
|
||
"dateReserved": "2021-01-29T00:00:00.000Z"
|
||
},
|
||
"containers": {
|
||
"cna": {
|
||
"datePublic": "2022-11-08T00:00:00.000Z",
|
||
"providerMetadata": {
|
||
"orgId": "b58fc414-a1e4-4f92-9d70-1add41838648",
|
||
"shortName": "AMD",
|
||
"dateUpdated": "2022-11-09T00:00:00.000Z"
|
||
},
|
||
"descriptions": [
|
||
{
|
||
"lang": "en",
|
||
"value": "An attacker with local access to the system can make unauthorized modifications of the security configuration of the SOC registers. This could allow potential corruption of AMD secure processor’s encrypted memory contents which may lead to arbitrary code execution in ASP."
|
||
}
|
||
],
|
||
"affected": [
|
||
{
|
||
"vendor": "AMD",
|
||
"product": "AMD Radeon RX 6000 Series & PRO W6000 Series",
|
||
"versions": [
|
||
{
|
||
"version": "AMD Radeon Software",
|
||
"status": "affected",
|
||
"lessThan": "22.5.2",
|
||
"versionType": "custom"
|
||
},
|
||
{
|
||
"version": "AMD Radeon Pro Software Enterprise",
|
||
"status": "affected",
|
||
"lessThan": "22.Q2",
|
||
"versionType": "custom"
|
||
},
|
||
{
|
||
"version": "Enterprise Driver",
|
||
"status": "affected",
|
||
"lessThan": "22.10.20",
|
||
"versionType": "custom"
|
||
}
|
||
]
|
||
}
|
||
],
|
||
"references": [
|
||
{
|
||
"url": "https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1029"
|
||
}
|
||
],
|
||
"problemTypes": [
|
||
{
|
||
"descriptions": [
|
||
{
|
||
"type": "text",
|
||
"lang": "en",
|
||
"description": "TBD"
|
||
}
|
||
]
|
||
}
|
||
],
|
||
"x_generator": {
|
||
"engine": "Vulnogram 0.0.9"
|
||
},
|
||
"source": {
|
||
"advisory": "AMD-SB-1029",
|
||
"discovery": "EXTERNAL"
|
||
}
|
||
},
|
||
"adp": [
|
||
{
|
||
"providerMetadata": {
|
||
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
|
||
"shortName": "CVE",
|
||
"dateUpdated": "2024-08-03T20:26:25.015Z"
|
||
},
|
||
"title": "CVE Program Container",
|
||
"references": [
|
||
{
|
||
"url": "https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1029",
|
||
"tags": [
|
||
"x_transferred"
|
||
]
|
||
}
|
||
]
|
||
},
|
||
{
|
||
"problemTypes": [
|
||
{
|
||
"descriptions": [
|
||
{
|
||
"type": "CWE",
|
||
"cweId": "CWE-284",
|
||
"lang": "en",
|
||
"description": "CWE-284 Improper Access Control"
|
||
}
|
||
]
|
||
}
|
||
],
|
||
"metrics": [
|
||
{
|
||
"cvssV3_1": {
|
||
"scope": "UNCHANGED",
|
||
"version": "3.1",
|
||
"baseScore": 7.8,
|
||
"attackVector": "LOCAL",
|
||
"baseSeverity": "HIGH",
|
||
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
|
||
"integrityImpact": "HIGH",
|
||
"userInteraction": "NONE",
|
||
"attackComplexity": "LOW",
|
||
"availabilityImpact": "HIGH",
|
||
"privilegesRequired": "LOW",
|
||
"confidentialityImpact": "HIGH"
|
||
}
|
||
},
|
||
{
|
||
"other": {
|
||
"type": "ssvc",
|
||
"content": {
|
||
"timestamp": "2025-05-01T14:11:37.852727Z",
|
||
"id": "CVE-2021-26360",
|
||
"options": [
|
||
{
|
||
"Exploitation": "none"
|
||
},
|
||
{
|
||
"Automatable": "no"
|
||
},
|
||
{
|
||
"Technical Impact": "total"
|
||
}
|
||
],
|
||
"role": "CISA Coordinator",
|
||
"version": "2.0.3"
|
||
}
|
||
}
|
||
}
|
||
],
|
||
"title": "CISA ADP Vulnrichment",
|
||
"providerMetadata": {
|
||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||
"shortName": "CISA-ADP",
|
||
"dateUpdated": "2025-05-01T14:12:12.910Z"
|
||
}
|
||
}
|
||
]
|
||
}
|
||
} |