CVE-2021-46747

Privilege Escalation via Weak SMN Access Control in AMD Secure Processor

Published Jun 1, 2026 CVSS 4.0 · 7.1 High EPSS < 1% KEV · Not listed
Description
Insufficient granularity of access control in ASP (AMD Secure Processor) may allow an attacker with an untrusted user space application to map sensitive SMN (System Management Network) apertures leading to a potential escalation of privileges.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History
Type Values Removed Values Added
First Time appeared Amd
Amd athlon 3000 Series Mobile Processors With Radeon Graphics
Amd radeon Pro V520
Amd radeon Pro V620
Amd radeon Pro W5000 Series
Amd radeon Pro W6000 Series
Amd radeon Pro W7000 Series
Amd radeon Rx 5000 Series
Amd radeon Rx 6000 Series
Amd radeon Rx 7000 Series
Amd ryzen 3000 Series Desktop Processors
Amd ryzen 3000 Series Mobile Processors With Radeon Graphics
Amd ryzen 4000 Series Desktop Processors
Amd ryzen 4000 Series Mobile Processors With Radeon Graphics
Amd ryzen 5000 Series Desktop Processors
Amd ryzen 5000 Series Desktop Processors With Radeon Graphics
Amd ryzen 5000 Series Mobile Processors With Radeon Graphics
Amd ryzen 7030 Series Mobile Processors With Radeon Graphics
Amd ryzen Embedded 5000 Series Processors
Amd ryzen Embedded R1000 Series Processors
Amd ryzen Embedded R2000 Series Processors
Amd ryzen Embedded V1000 Series Processors
Amd ryzen Embedded V2000 Series Processors
Amd ryzen Embedded V3000 Series Processors
Amd ryzen Threadripper Pro 3000 Wx-series Processors
Amd ryzen Threadripper Pro 5000 Wx-series Processors
Vendors & Products Amd
Amd athlon 3000 Series Mobile Processors With Radeon Graphics
Amd radeon Pro V520
Amd radeon Pro V620
Amd radeon Pro W5000 Series
Amd radeon Pro W6000 Series
Amd radeon Pro W7000 Series
Amd radeon Rx 5000 Series
Amd radeon Rx 6000 Series
Amd radeon Rx 7000 Series
Amd ryzen 3000 Series Desktop Processors
Amd ryzen 3000 Series Mobile Processors With Radeon Graphics
Amd ryzen 4000 Series Desktop Processors
Amd ryzen 4000 Series Mobile Processors With Radeon Graphics
Amd ryzen 5000 Series Desktop Processors
Amd ryzen 5000 Series Desktop Processors With Radeon Graphics
Amd ryzen 5000 Series Mobile Processors With Radeon Graphics
Amd ryzen 7030 Series Mobile Processors With Radeon Graphics
Amd ryzen Embedded 5000 Series Processors
Amd ryzen Embedded R1000 Series Processors
Amd ryzen Embedded R2000 Series Processors
Amd ryzen Embedded V1000 Series Processors
Amd ryzen Embedded V2000 Series Processors
Amd ryzen Embedded V3000 Series Processors
Amd ryzen Threadripper Pro 3000 Wx-series Processors
Amd ryzen Threadripper Pro 5000 Wx-series Processors
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Type Values Removed Values Added
Title Privilege Escalation via Weak SMN Access Control in AMD Secure Processor
Type Values Removed Values Added
Description Insufficient granularity of access control in ASP (AMD Secure Processor) may allow an attacker with an untrusted user space application to map sensitive SMN (System Management Network) apertures leading to a potential escalation of privileges.
Weaknesses CWE-1220
References
Metrics cvssV4_0

{'score': 7.1, 'vector': 'CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N'}

Weaknesses

Sources

Status
PUBLISHED
Assigner
AMD
Published
Updated
Jun 2, 2026, 1:45 PM
Reserved
Mar 31, 2022, 4:50 PM
Status
Awaiting Analysis
Published
Jun 1, 2026, 9:16 PM
Modified
Jul 22, 2026, 8:10 AM