CVE & CISA-KEV Catalog

CVE-2021-46766

LOW

2.5

CVSS v3

Description

Improper clearing of sensitive data in the ASP Bootloader may expose secret keys to a privileged attacker accessing ASP SRAM, potentially leading to a loss of confidentiality.

How to fix

Remediation Available

epyc 9124 firmwareNVD

Affected:< genoapi_1.0.0.4Fixed in:genoapi_1.0.0.4CVE-2021-46766derived from NVD

epyc 9174f firmwareNVD

Affected:< genoapi_1.0.0.4Fixed in:genoapi_1.0.0.4CVE-2021-46766derived from NVD

epyc 9184x firmwareNVD

Affected:< genoapi_1.0.0.4Fixed in:genoapi_1.0.0.4CVE-2021-46766derived from NVD

epyc 9224 firmwareNVD

Affected:< genoapi_1.0.0.4Fixed in:genoapi_1.0.0.4CVE-2021-46766derived from NVD

epyc 9254 firmwareNVD

Affected:< genoapi_1.0.0.4Fixed in:genoapi_1.0.0.4CVE-2021-46766derived from NVD

epyc 9274f firmwareNVD

Affected:< genoapi_1.0.0.4Fixed in:genoapi_1.0.0.4CVE-2021-46766derived from NVD

epyc 9334 firmwareNVD

Affected:< genoapi_1.0.0.4Fixed in:genoapi_1.0.0.4CVE-2021-46766derived from NVD

epyc 9354 firmwareNVD

Affected:< genoapi_1.0.0.4Fixed in:genoapi_1.0.0.4CVE-2021-46766derived from NVD

epyc 9354p firmwareNVD

Affected:< genoapi_1.0.0.4Fixed in:genoapi_1.0.0.4CVE-2021-46766derived from NVD

epyc 9374f firmwareNVD

Affected:< genoapi_1.0.0.4Fixed in:genoapi_1.0.0.4CVE-2021-46766derived from NVD

epyc 9384x firmwareNVD

Affected:< genoapi_1.0.0.4Fixed in:genoapi_1.0.0.4CVE-2021-46766derived from NVD

epyc 9454 firmwareNVD

Affected:< genoapi_1.0.0.4Fixed in:genoapi_1.0.0.4CVE-2021-46766derived from NVD

epyc 9454p firmwareNVD

Affected:< genoapi_1.0.0.4Fixed in:genoapi_1.0.0.4CVE-2021-46766derived from NVD

epyc 9474f firmwareNVD

Affected:< genoapi_1.0.0.4Fixed in:genoapi_1.0.0.4CVE-2021-46766derived from NVD

epyc 9534 firmwareNVD

Affected:< genoapi_1.0.0.4Fixed in:genoapi_1.0.0.4CVE-2021-46766derived from NVD

epyc 9554 firmwareNVD

Affected:< genoapi_1.0.0.4Fixed in:genoapi_1.0.0.4CVE-2021-46766derived from NVD

epyc 9554p firmwareNVD

Affected:< genoapi_1.0.0.4Fixed in:genoapi_1.0.0.4CVE-2021-46766derived from NVD

epyc 9634 firmwareNVD

Affected:< genoapi_1.0.0.4Fixed in:genoapi_1.0.0.4CVE-2021-46766derived from NVD

epyc 9654 firmwareNVD

Affected:< genoapi_1.0.0.4Fixed in:genoapi_1.0.0.4CVE-2021-46766derived from NVD

epyc 9654p firmwareNVD

Affected:< genoapi_1.0.0.4Fixed in:genoapi_1.0.0.4CVE-2021-46766derived from NVD

epyc 9684x firmwareNVD

Affected:< genoapi_1.0.0.4Fixed in:genoapi_1.0.0.4CVE-2021-46766derived from NVD

epyc 9734 firmwareNVD

Affected:< genoapi_1.0.0.4Fixed in:genoapi_1.0.0.4CVE-2021-46766derived from NVD

epyc 9754 firmwareNVD

Affected:< genoapi_1.0.0.4Fixed in:genoapi_1.0.0.4CVE-2021-46766derived from NVD

epyc 9754s firmwareNVD

Affected:< genoapi_1.0.0.4Fixed in:genoapi_1.0.0.4CVE-2021-46766derived from NVD

ryzen threadripper pro 3945wx firmwareNVD

Affected:< chagallwspi-swrx8_1.0.0.5Fixed in:chagallwspi-swrx8_1.0.0.5CVE-2021-46766derived from NVD

ryzen threadripper pro 3955wx firmwareNVD

Affected:< chagallwspi-swrx8_1.0.0.5Fixed in:chagallwspi-swrx8_1.0.0.5CVE-2021-46766derived from NVD

ryzen threadripper pro 3975wx firmwareNVD

Affected:< chagallwspi-swrx8_1.0.0.5Fixed in:chagallwspi-swrx8_1.0.0.5CVE-2021-46766derived from NVD

ryzen threadripper pro 3995wx firmwareNVD

Affected:< chagallwspi-swrx8_1.0.0.5Fixed in:chagallwspi-swrx8_1.0.0.5CVE-2021-46766derived from NVD

Remediation is compiled from vendor and distribution security advisories. Always confirm against the linked source for your exact version and platform.

CVSS v3 Vector

Exploitability

Attack VectorLocal

Attack ComplexityHigh

Privileges RequiredHigh

User InteractionNone

ScopeChanged

Impact

ConfidentialityLow

IntegrityNone

AvailabilityNone

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:N/A:N

Exploit Intelligence

0.23%probability of exploitation in 30 days

14thpercentile

Low risk: more likely to be exploited than 14% of all known CVEs.

References

Vendor Advisory2

Other references1

amd.com

Related Vulnerabilities

Other CWE-459 vulnerabilities, ordered by exploit likelihood. View all

CVE	Severity	CVSS	EPSS	Exploited	Fix
CVE-2017-17090	High	7.5	82%	-	Fix
CVE-2021-39327	Medium	5.3	72%	-	-
CVE-2025-31650	High	7.5	67%	-	Fix
CVE-2022-1552	High	8.8	12%	-	Fix
CVE-2018-18924	High	8.8	9.5%	-	-
CVE-2022-21125	Medium	5.5	6.5%	-	Fix

Embed a live status badge for CVE-2021-46766

Markdown

[![CVE-2021-46766](https://tridentstack.com/cve/badge/CVE-2021-46766.svg)](https://tridentstack.com/cve/CVE-2021-46766)

HTML

<a href="https://tridentstack.com/cve/CVE-2021-46766"><img src="https://tridentstack.com/cve/badge/CVE-2021-46766.svg" alt="CVE-2021-46766"></a>

Find and fix vulnerabilities across your fleet

TridentStack Control continuously scans your Windows, macOS, and Linux fleet for known vulnerabilities, prioritizes them by severity and active exploitation, and patches them automatically.

This product uses NVD data but is not endorsed or certified by the NVD. EPSS scores courtesy of FIRST.org (https://www.first.org/epss). Source: CISA KEV Catalog. Data as of 2024-11-21.