Lucene search

PRIOn knowledge basePRION:CVE-2021-39298

HistoryFeb 16, 2022 - 5:15 p.m.

Authentication flaw

2022-02-1617:15:00

PRIOn knowledge base

www.prio-n.com

8.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

8.8 High

AI Score

Confidence

High

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

10.6%

JSON

A potential vulnerability in AMD System Management Mode (SMM) interrupt handler may allow an attacker with high privileges to access the SMM resulting in arbitrary code execution which could be used by malicious actors to bypass security mechanisms provided in the UEFI firmware.

CPENameOperatorVersion
260_g3_desktop_mini_pc_firmwarele2.17.00
elite_dragonfly_firmwarelt01.12.00
elite_dragonfly_g2_firmwarelt01.08.00
elite_dragonfly_max_firmwarelt01.08.00
elite_x2_1013_g3_firmwarelt01.19.00
elite_x2_g4_firmwarelt01.12.00
elite_x2_g8_tablet_firmwarelt01.08.00
elitebook_1050_g1_firmwarelt01.19.00
elitebook_830_g5_firmwarelt01.19.00
elitebook_830_g6_firmwarelt01.12.00

Name	Operator	Version
260_g3_desktop_mini_pc_firmware	le	2.17.00
elite_dragonfly_firmware	lt	01.12.00
elite_dragonfly_g2_firmware	lt	01.08.00
elite_dragonfly_max_firmware	lt	01.08.00
elite_x2_1013_g3_firmware	lt	01.19.00
elite_x2_g4_firmware	lt	01.12.00
elite_x2_g8_tablet_firmware	lt	01.08.00
elitebook_1050_g1_firmware	lt	01.19.00
elitebook_830_g5_firmware	lt	01.19.00
elitebook_830_g6_firmware	lt	01.12.00

Rows per page:

1-10 of 1961

References

www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1027

www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032

8.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

8.8 High

AI Score

Confidence

High

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

10.6%

JSON

Related for PRION:CVE-2021-39298