Read the docs
TI-2021-08143 Aliases CVE-2021-26315GHSA-4qp6-97jw-9prg

Insufficient verification of data authenticity in AMD 3rd Gen AMD EPYC™

Priority LOW 33CWE-345Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-345.

Summary

When the AMD Platform Security Processor (PSP) boot rom loads, authenticates, and subsequently decrypts an encrypted FW, due to insufficient verification of the integrity of decrypted image, arbitrary code may be executed in the PSP when encrypted firmware images are used.

Why it matters now

EPSS 0.00165 5th percentileScored 2026-11-07
Fix Fixed 3rd Gen AMD EPYC™ (AMD): MilanPI-SP3_1.0.0.4

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
AMD3rd Gen AMD EPYC™before MilanPI-SP3_1.0.0.4MilanPI-SP3_1.0.0.4Patch availableCNA
  • 3rd Gen AMD EPYC™ VendorAMD Affected before MilanPI-SP3_1.0.0.4 Fixed in MilanPI-SP3_1.0.0.4 Patch available CNA

CPE configurations NVD · 40

CPEVersionsRoleVendor
cpe:2.3:o:amd:epyc_7003_firmware:*:*:*:*:*:*:*:*before milanpi-sp3_1.0.0.4VulnerableAMD
cpe:2.3:h:amd:epyc_7003:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:epyc_72f3_firmware:*:*:*:*:*:*:*:*before milanpi-sp3_1.0.0.4VulnerableAMD
cpe:2.3:h:amd:epyc_72f3:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:epyc_7313_firmware:*:*:*:*:*:*:*:*before milanpi-sp3_1.0.0.4VulnerableAMD
cpe:2.3:h:amd:epyc_7313:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:epyc_7313p_firmware:*:*:*:*:*:*:*:*before milanpi-sp3_1.0.0.4VulnerableAMD
cpe:2.3:h:amd:epyc_7313p:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:epyc_7343_firmware:*:*:*:*:*:*:*:*before milanpi-sp3_1.0.0.4VulnerableAMD
cpe:2.3:h:amd:epyc_7343:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
  • cpe:2.3:o:amd:epyc_7003_firmware:*:*:*:*:*:*:*:* Versions before milanpi-sp3_1.0.0.4 Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7003:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:epyc_72f3_firmware:*:*:*:*:*:*:*:* Versions before milanpi-sp3_1.0.0.4 Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_72f3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:epyc_7313_firmware:*:*:*:*:*:*:*:* Versions before milanpi-sp3_1.0.0.4 Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7313:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:epyc_7313p_firmware:*:*:*:*:*:*:*:* Versions before milanpi-sp3_1.0.0.4 Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7313p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:epyc_7343_firmware:*:*:*:*:*:*:*:* Versions before milanpi-sp3_1.0.0.4 Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7343:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
Show 30 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:amd:epyc_73f3_firmware:*:*:*:*:*:*:*:*before milanpi-sp3_1.0.0.4VulnerableAMD
cpe:2.3:h:amd:epyc_73f3:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:epyc_7413_firmware:*:*:*:*:*:*:*:*before milanpi-sp3_1.0.0.4VulnerableAMD
cpe:2.3:h:amd:epyc_7413:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:epyc_7443_firmware:*:*:*:*:*:*:*:*before milanpi-sp3_1.0.0.4VulnerableAMD
cpe:2.3:h:amd:epyc_7443:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:epyc_7443p_firmware:*:*:*:*:*:*:*:*before milanpi-sp3_1.0.0.4VulnerableAMD
cpe:2.3:h:amd:epyc_7443p:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:epyc_7453_firmware:*:*:*:*:*:*:*:*before milanpi-sp3_1.0.0.4VulnerableAMD
cpe:2.3:h:amd:epyc_7453:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:epyc_74f3_firmware:*:*:*:*:*:*:*:*before milanpi-sp3_1.0.0.4VulnerableAMD
cpe:2.3:h:amd:epyc_74f3:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:epyc_7513_firmware:*:*:*:*:*:*:*:*before milanpi-sp3_1.0.0.4VulnerableAMD
cpe:2.3:h:amd:epyc_7513:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:epyc_7543_firmware:*:*:*:*:*:*:*:*before milanpi-sp3_1.0.0.4VulnerableAMD
cpe:2.3:h:amd:epyc_7543:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:epyc_7543p_firmware:*:*:*:*:*:*:*:*before milanpi-sp3_1.0.0.4VulnerableAMD
cpe:2.3:h:amd:epyc_7543p:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:epyc_75f3_firmware:*:*:*:*:*:*:*:*before milanpi-sp3_1.0.0.4VulnerableAMD
cpe:2.3:h:amd:epyc_75f3:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:epyc_7643_firmware:*:*:*:*:*:*:*:*before milanpi-sp3_1.0.0.4VulnerableAMD
cpe:2.3:h:amd:epyc_7643:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:epyc_7663_firmware:*:*:*:*:*:*:*:*before milanpi-sp3_1.0.0.4VulnerableAMD
cpe:2.3:h:amd:epyc_7663:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:epyc_7713_firmware:*:*:*:*:*:*:*:*before milanpi-sp3_1.0.0.4VulnerableAMD
cpe:2.3:h:amd:epyc_7713:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:epyc_7713p_firmware:*:*:*:*:*:*:*:*before milanpi-sp3_1.0.0.4VulnerableAMD
cpe:2.3:h:amd:epyc_7713p:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:epyc_7763_firmware:*:*:*:*:*:*:*:*before milanpi-sp3_1.0.0.4VulnerableAMD
cpe:2.3:h:amd:epyc_7763:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
  • cpe:2.3:o:amd:epyc_73f3_firmware:*:*:*:*:*:*:*:* Versions before milanpi-sp3_1.0.0.4 Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_73f3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:epyc_7413_firmware:*:*:*:*:*:*:*:* Versions before milanpi-sp3_1.0.0.4 Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7413:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:epyc_7443_firmware:*:*:*:*:*:*:*:* Versions before milanpi-sp3_1.0.0.4 Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7443:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:epyc_7443p_firmware:*:*:*:*:*:*:*:* Versions before milanpi-sp3_1.0.0.4 Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7443p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:epyc_7453_firmware:*:*:*:*:*:*:*:* Versions before milanpi-sp3_1.0.0.4 Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7453:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:epyc_74f3_firmware:*:*:*:*:*:*:*:* Versions before milanpi-sp3_1.0.0.4 Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_74f3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:epyc_7513_firmware:*:*:*:*:*:*:*:* Versions before milanpi-sp3_1.0.0.4 Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7513:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:epyc_7543_firmware:*:*:*:*:*:*:*:* Versions before milanpi-sp3_1.0.0.4 Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7543:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:epyc_7543p_firmware:*:*:*:*:*:*:*:* Versions before milanpi-sp3_1.0.0.4 Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7543p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:epyc_75f3_firmware:*:*:*:*:*:*:*:* Versions before milanpi-sp3_1.0.0.4 Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_75f3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:epyc_7643_firmware:*:*:*:*:*:*:*:* Versions before milanpi-sp3_1.0.0.4 Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7643:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:epyc_7663_firmware:*:*:*:*:*:*:*:* Versions before milanpi-sp3_1.0.0.4 Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7663:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:epyc_7713_firmware:*:*:*:*:*:*:*:* Versions before milanpi-sp3_1.0.0.4 Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7713:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:epyc_7713p_firmware:*:*:*:*:*:*:*:* Versions before milanpi-sp3_1.0.0.4 Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7713p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:epyc_7763_firmware:*:*:*:*:*:*:*:* Versions before milanpi-sp3_1.0.0.4 Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_7763:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD

Remediation

  • Fix · CNA 3rd Gen AMD EPYC™ (AMD) Fixed in MilanPI-SP3_1.0.0.4

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    AMD 3rd Gen AMD EPYC™ MilanPI-SP3_1.0.0.4

    14 records Highest priority Priority LOW 14 LOW

    Other records, highest priority first

    • TI-2021-08165 Improper access control in AMD 2nd Gen AMD EPYC™Priority LOW 35
    • TI-2021-08149 Persistent platform private key may not be protected with a random IV leading to a potential “two time pad attack”.Priority LOW 35
    • TI-2021-08158 Improper input validation in AMD 1st Gen AMD EPYC™Priority LOW 34
    Show all 14 records →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2021-26315
  2. 2026-10-03 Alias added: GHSA-4qp6-97jw-9prg

References

Advisory 1

  • TI-2021-08144 Improper input validation in AMD Ryzen 5000 Series CVSS 3.1HIGH 7.8
  • TI-2021-08217 Out-of-bounds write in AMD 1st Gen EPYC CVSS 3.1HIGH 7.8
  • TI-2020-10295 A potential denial of service (DoS) vulnerability exists in the integrated chipset that… CVSS 3.1HIGH 7.5
  • TI-2023-07003 Memory corruption in AMD 2nd Gen EPYC CVSS 3.1HIGH 7.5
  • TI-2023-07002 Improper input validation in AMD 3rd Gen EPYC CVSS 3.1HIGH 7.5
  • TI-2023-07001 Memory corruption in AMD 2nd Gen EPYC CVSS 3.1HIGH 7.5
See all 33 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences