Read the docs
TI-2021-21482 Aliases CVE-2021-46766GHSA-34xr-h92c-2m86

Improper clearing of sensitive data in the ASP Bootloader may expose secret keys to a…

Priority LOW 24CWE-459Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · None · None
Fix status
No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA.

Summary

Improper clearing of sensitive data in the ASP Bootloader may expose secret keys to a privileged attacker accessing ASP SRAM, potentially leading to a loss of confidentiality.

Why it matters now

EPSS 0.00228 13th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
AMDRyzen™ Threadripper™ PRO 3000WX Series Processors “Chagall” WSvarious—No fix listedCNA
AMD4th Gen AMD EPYC™ Processorsvarious—No fix listedCNA
AMDAMD EPYC™ Embedded 9003various—No fix listedCNA
  • Ryzen™ Threadripper™ PRO 3000WX Series Processors “Chagall” WS VendorAMD Affected various Fixed in — No fix listed CNA
  • 4th Gen AMD EPYC™ Processors VendorAMD Affected various Fixed in — No fix listed CNA
  • AMD EPYC™ Embedded 9003 VendorAMD Affected various Fixed in — No fix listed CNA

CPE configurations NVD · 56

CPEVersionsRoleVendor
cpe:2.3:o:amd:epyc_9654p_firmware:*:*:*:*:*:*:*:*before genoapi_1.0.0.4VulnerableAMD
cpe:2.3:h:amd:epyc_9654p:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:epyc_9654_firmware:*:*:*:*:*:*:*:*before genoapi_1.0.0.4VulnerableAMD
cpe:2.3:h:amd:epyc_9654:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:epyc_9634_firmware:*:*:*:*:*:*:*:*before genoapi_1.0.0.4VulnerableAMD
cpe:2.3:h:amd:epyc_9634:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:epyc_9554p_firmware:*:*:*:*:*:*:*:*before genoapi_1.0.0.4VulnerableAMD
cpe:2.3:h:amd:epyc_9554p:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:epyc_9554_firmware:*:*:*:*:*:*:*:*before genoapi_1.0.0.4VulnerableAMD
cpe:2.3:h:amd:epyc_9554:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
  • cpe:2.3:o:amd:epyc_9654p_firmware:*:*:*:*:*:*:*:* Versions before genoapi_1.0.0.4 Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_9654p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:epyc_9654_firmware:*:*:*:*:*:*:*:* Versions before genoapi_1.0.0.4 Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_9654:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:epyc_9634_firmware:*:*:*:*:*:*:*:* Versions before genoapi_1.0.0.4 Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_9634:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:epyc_9554p_firmware:*:*:*:*:*:*:*:* Versions before genoapi_1.0.0.4 Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_9554p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:epyc_9554_firmware:*:*:*:*:*:*:*:* Versions before genoapi_1.0.0.4 Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_9554:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
Show 46 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:amd:epyc_9534_firmware:*:*:*:*:*:*:*:*before genoapi_1.0.0.4VulnerableAMD
cpe:2.3:h:amd:epyc_9534:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:epyc_9474f_firmware:*:*:*:*:*:*:*:*before genoapi_1.0.0.4VulnerableAMD
cpe:2.3:h:amd:epyc_9474f:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:epyc_9454p_firmware:*:*:*:*:*:*:*:*before genoapi_1.0.0.4VulnerableAMD
cpe:2.3:h:amd:epyc_9454p:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:epyc_9454_firmware:*:*:*:*:*:*:*:*before genoapi_1.0.0.4VulnerableAMD
cpe:2.3:h:amd:epyc_9454:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:epyc_9374f_firmware:*:*:*:*:*:*:*:*before genoapi_1.0.0.4VulnerableAMD
cpe:2.3:h:amd:epyc_9374f:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:epyc_9354p_firmware:*:*:*:*:*:*:*:*before genoapi_1.0.0.4VulnerableAMD
cpe:2.3:h:amd:epyc_9354p:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:epyc_9354_firmware:*:*:*:*:*:*:*:*before genoapi_1.0.0.4VulnerableAMD
cpe:2.3:h:amd:epyc_9354:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:epyc_9334_firmware:*:*:*:*:*:*:*:*before genoapi_1.0.0.4VulnerableAMD
cpe:2.3:h:amd:epyc_9334:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:epyc_9274f_firmware:*:*:*:*:*:*:*:*before genoapi_1.0.0.4VulnerableAMD
cpe:2.3:h:amd:epyc_9274f:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:epyc_9254_firmware:*:*:*:*:*:*:*:*before genoapi_1.0.0.4VulnerableAMD
cpe:2.3:h:amd:epyc_9254:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:epyc_9224_firmware:*:*:*:*:*:*:*:*before genoapi_1.0.0.4VulnerableAMD
cpe:2.3:h:amd:epyc_9224:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:epyc_9174f_firmware:*:*:*:*:*:*:*:*before genoapi_1.0.0.4VulnerableAMD
cpe:2.3:h:amd:epyc_9174f:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:epyc_9124_firmware:*:*:*:*:*:*:*:*before genoapi_1.0.0.4VulnerableAMD
cpe:2.3:h:amd:epyc_9124:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:epyc_9684x_firmware:*:*:*:*:*:*:*:*before genoapi_1.0.0.4VulnerableAMD
cpe:2.3:h:amd:epyc_9684x:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:epyc_9384x_firmware:*:*:*:*:*:*:*:*before genoapi_1.0.0.4VulnerableAMD
cpe:2.3:h:amd:epyc_9384x:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:epyc_9184x_firmware:*:*:*:*:*:*:*:*before genoapi_1.0.0.4VulnerableAMD
cpe:2.3:h:amd:epyc_9184x:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:epyc_9754_firmware:*:*:*:*:*:*:*:*before genoapi_1.0.0.4VulnerableAMD
cpe:2.3:h:amd:epyc_9754:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:epyc_9754s_firmware:*:*:*:*:*:*:*:*before genoapi_1.0.0.4VulnerableAMD
cpe:2.3:h:amd:epyc_9754s:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:epyc_9734_firmware:*:*:*:*:*:*:*:*before genoapi_1.0.0.4VulnerableAMD
cpe:2.3:h:amd:epyc_9734:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:ryzen_threadripper_pro_3995wx_firmware:*:*:*:*:*:*:*:*before chagallwspi-swrx8_1.0.0.5VulnerableAMD
cpe:2.3:h:amd:ryzen_threadripper_pro_3995wx:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:ryzen_threadripper_pro_3975wx_firmware:*:*:*:*:*:*:*:*before chagallwspi-swrx8_1.0.0.5VulnerableAMD
cpe:2.3:h:amd:ryzen_threadripper_pro_3975wx:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:ryzen_threadripper_pro_3955wx_firmware:*:*:*:*:*:*:*:*before chagallwspi-swrx8_1.0.0.5VulnerableAMD
cpe:2.3:h:amd:ryzen_threadripper_pro_3955wx:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
cpe:2.3:o:amd:ryzen_threadripper_pro_3945wx_firmware:*:*:*:*:*:*:*:*before chagallwspi-swrx8_1.0.0.5VulnerableAMD
cpe:2.3:h:amd:ryzen_threadripper_pro_3945wx:-:*:*:*:*:*:*:*not specified by NVDRunning onAMD
  • cpe:2.3:o:amd:epyc_9534_firmware:*:*:*:*:*:*:*:* Versions before genoapi_1.0.0.4 Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_9534:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:epyc_9474f_firmware:*:*:*:*:*:*:*:* Versions before genoapi_1.0.0.4 Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_9474f:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:epyc_9454p_firmware:*:*:*:*:*:*:*:* Versions before genoapi_1.0.0.4 Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_9454p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:epyc_9454_firmware:*:*:*:*:*:*:*:* Versions before genoapi_1.0.0.4 Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_9454:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:epyc_9374f_firmware:*:*:*:*:*:*:*:* Versions before genoapi_1.0.0.4 Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_9374f:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:epyc_9354p_firmware:*:*:*:*:*:*:*:* Versions before genoapi_1.0.0.4 Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_9354p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:epyc_9354_firmware:*:*:*:*:*:*:*:* Versions before genoapi_1.0.0.4 Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_9354:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:epyc_9334_firmware:*:*:*:*:*:*:*:* Versions before genoapi_1.0.0.4 Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_9334:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:epyc_9274f_firmware:*:*:*:*:*:*:*:* Versions before genoapi_1.0.0.4 Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_9274f:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:epyc_9254_firmware:*:*:*:*:*:*:*:* Versions before genoapi_1.0.0.4 Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_9254:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:epyc_9224_firmware:*:*:*:*:*:*:*:* Versions before genoapi_1.0.0.4 Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_9224:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:epyc_9174f_firmware:*:*:*:*:*:*:*:* Versions before genoapi_1.0.0.4 Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_9174f:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:epyc_9124_firmware:*:*:*:*:*:*:*:* Versions before genoapi_1.0.0.4 Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_9124:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:epyc_9684x_firmware:*:*:*:*:*:*:*:* Versions before genoapi_1.0.0.4 Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_9684x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:epyc_9384x_firmware:*:*:*:*:*:*:*:* Versions before genoapi_1.0.0.4 Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_9384x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:epyc_9184x_firmware:*:*:*:*:*:*:*:* Versions before genoapi_1.0.0.4 Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_9184x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:epyc_9754_firmware:*:*:*:*:*:*:*:* Versions before genoapi_1.0.0.4 Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_9754:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:epyc_9754s_firmware:*:*:*:*:*:*:*:* Versions before genoapi_1.0.0.4 Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_9754s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:epyc_9734_firmware:*:*:*:*:*:*:*:* Versions before genoapi_1.0.0.4 Vulnerable ·AMD
  • cpe:2.3:h:amd:epyc_9734:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:ryzen_threadripper_pro_3995wx_firmware:*:*:*:*:*:*:*:* Versions before chagallwspi-swrx8_1.0.0.5 Vulnerable ·AMD
  • cpe:2.3:h:amd:ryzen_threadripper_pro_3995wx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:ryzen_threadripper_pro_3975wx_firmware:*:*:*:*:*:*:*:* Versions before chagallwspi-swrx8_1.0.0.5 Vulnerable ·AMD
  • cpe:2.3:h:amd:ryzen_threadripper_pro_3975wx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:ryzen_threadripper_pro_3955wx_firmware:*:*:*:*:*:*:*:* Versions before chagallwspi-swrx8_1.0.0.5 Vulnerable ·AMD
  • cpe:2.3:h:amd:ryzen_threadripper_pro_3955wx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
  • cpe:2.3:o:amd:ryzen_threadripper_pro_3945wx_firmware:*:*:*:*:*:*:*:* Versions before chagallwspi-swrx8_1.0.0.5 Vulnerable ·AMD
  • cpe:2.3:h:amd:ryzen_threadripper_pro_3945wx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD

Remediation

No fixed version listed by the sources yet.

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Advisory ·

    AMD 4th Gen AMD EPYC™ Processors, AMD EPYC™ Embedded 9003 — amd.com/en/corporate/product-security/bulletin/AMD-SB-3002

    5 records Highest priority Priority LOW 5 LOW

    Other records, highest priority first

    • TI-2023-07018 Improper address validation in ASP with SNP enabled may potentially allow an attacker to…Priority LOW 33
    • TI-2021-21489 Insufficient DRAM address validation in System Management Unit (SMU) may allow an…Priority LOW 33
    • TI-2021-08172 Out-of-bounds read in AMD 2nd Gen AMD EPYC™ ProcessorsPriority LOW 23
    Show all 5 records → Advisory →
  • Advisory ·

    AMD 4th Gen AMD EPYC™ Processors, Ryzen™ Threadripper™ PRO 3000WX Series Processors “Chagall” WS — amd.com/en/corporate/product-security/bulletin/AMD-SB-4002

    3 records Highest priority Priority MEDIUM 1 MEDIUM, 2 LOW

    Other records, highest priority first

    • TI-2022-07839 Improper access control in System Management Mode (SMM) may allow an attacker to write to…Priority MEDIUM 51
    • TI-2021-21489 Insufficient DRAM address validation in System Management Unit (SMU) may allow an…Priority LOW 33
    Show all 3 records → Advisory →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2021-46766
  2. 2026-10-03 Alias added: GHSA-34xr-h92c-2m86

References

Advisory 3

  • TI-2023-07040 Improper re-initialization of IOMMU during the DRTM event may permit an untrusted… CVSS 3.1CRITICAL 10.0
  • TI-2024-14612 Memory corruption in AMD 3rd Gen AMD EPYC™ Processors CVSS 3.1HIGH 7.9
  • TI-2024-14610 Improper input validation in AMD 3rd Gen AMD EPYC™ Processors CVSS 3.1HIGH 7.9
  • TI-2023-07029 Time-of-check time-of-use race condition in AMD EPYC™ 7001 Processors CVSS 3.1HIGH 7.5
  • TI-2023-07018 Improper address validation in ASP with SNP enabled may potentially allow an attacker to… CVSS 3.1HIGH 7.5
  • TI-2021-21489 Insufficient DRAM address validation in System Management Unit (SMU) may allow an… CVSS 3.1HIGH 7.5
See all 15 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences