CVE-2024-21981

View on CVE.org
Published Aug 13, 2024 CVSS 3.1 · 5.7 Medium EPSS < 1% KEV · Not listed
Description
Improper key usage control in AMD Secure Processor
(ASP) may allow an attacker with local access who has gained arbitrary code
execution privilege in ASP to
extract ASP cryptographic keys, potentially resulting in loss of
confidentiality and integrity.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2024-19587 Improper key usage control in AMD Secure Processor (ASP) may allow an attacker with local access who has gained arbitrary code execution privilege in ASP to extract ASP cryptographic keys, potentially resulting in loss of confidentiality and integrity.
History
Type Values Removed Values Added
First Time appeared Amd
Amd athlon
Amd epyc
Amd ryzen
Weaknesses CWE-639
CPEs cpe:2.3:h:amd:athlon:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:epyc:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen:-:*:*:*:*:*:*:*
Vendors & Products Amd
Amd athlon
Amd epyc
Amd ryzen
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}
Type Values Removed Values Added
Description Improper key usage control in AMD Secure Processor (ASP) may allow an attacker with local access who has gained arbitrary code execution privilege in ASP to extract ASP cryptographic keys, potentially resulting in loss of confidentiality and integrity.
References
Metrics cvssV3_1

{'score': 5.7, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N'}
Weaknesses

Sources

Status
PUBLISHED
Assigner
AMD
Published
Updated
Aug 15, 2024, 6:09 PM
Reserved
Jan 3, 2024, 4:43 PM

View source JSON

Updated
Aug 14, 2024, 8:36 PM

JSON

Status
Deferred
Published
Aug 13, 2024, 5:15 PM
Modified
Jun 17, 2026, 7:10 AM

View source JSON

No data.

No data.