Insufficient bounds checking in ASP (AMD Secure Processor) firmware while handling BIOS mailbox commands, may allow an attacker to write partially-controlled data out-of-bounds to SMM or SEV-ES regions which may lead to a potential loss of integrity and availability.
総合評価: CVE-2021-26402 は低リスク（31.2/100）。CVSS 深刻度は高。悪用される可能性が高い（EPSS 0.18%、8 パーセンタイル） 推奨対応: 悪用情報と EPSS の推移を監視し、必要に応じて優先度を見直してください。
リスクは変動します。再評価に基づき、本ページの表示内容を更新しています。
EPSS は日次で悪用されやすさの相対度合いを推定します。パーセンタイルは採点済み CVE の中での相対位置（高いほど相対的に深刻）を示します。
| # | 日付 | 旧 EPSS スコア | 新 EPSS スコア | Δ（新 − 旧） |
|---|---|---|---|---|
| 1 | 2026-06-15 | 0.05% | 0.18% | +0.13% |
| 2 | 2025-03-17 | 0.04% | 0.05% | +0.01% |
| 3 | 2023-03-07 | — | 0.04% | — |
EPSS の全履歴 （全 4 件）
この CVE の CVSS 指標。
| ベーススコア | バージョン | 深刻度 | ベクトル | 悪用しやすさ | 影響 | スコアの出典 |
|---|---|---|---|---|---|---|
| 7.1 | 3.1 | HIGH |
|
1.8 | 5.2 | [email protected] |
| 7.1 | 3.1 | HIGH |
|
1.8 | 5.2 | 134c704f-9b21-4f2e-91b3-4a467353bcc0 |
| ベンダー | 製品 | バージョン | 生の CPE |
|---|---|---|---|
| amd | epyc_7h12_firmware | < romepi_1.0.0.c | cpe:2.3:o:amd:epyc_7h12_firmware:*:*:*:*:*:*:*:* |
| amd | epyc_7f72_firmware | < romepi_1.0.0.c | cpe:2.3:o:amd:epyc_7f72_firmware:*:*:*:*:*:*:*:* |
| amd | epyc_7f52_firmware | < romepi_1.0.0.c | cpe:2.3:o:amd:epyc_7f52_firmware:*:*:*:*:*:*:*:* |
| amd | epyc_7f32_firmware | < romepi_1.0.0.c | cpe:2.3:o:amd:epyc_7f32_firmware:*:*:*:*:*:*:*:* |
| amd | epyc_7742_firmware | < romepi_1.0.0.c | cpe:2.3:o:amd:epyc_7742_firmware:*:*:*:*:*:*:*:* |
| amd | epyc_7702p_firmware | < romepi_1.0.0.c | cpe:2.3:o:amd:epyc_7702p_firmware:*:*:*:*:*:*:*:* |
| amd | epyc_7702_firmware | < romepi_1.0.0.c | cpe:2.3:o:amd:epyc_7702_firmware:*:*:*:*:*:*:*:* |
| amd | epyc_7662_firmware | < romepi_1.0.0.c | cpe:2.3:o:amd:epyc_7662_firmware:*:*:*:*:*:*:*:* |
| amd | epyc_7642_firmware | < romepi_1.0.0.c | cpe:2.3:o:amd:epyc_7642_firmware:*:*:*:*:*:*:*:* |
| amd | epyc_7552_firmware | < romepi_1.0.0.c | cpe:2.3:o:amd:epyc_7552_firmware:*:*:*:*:*:*:*:* |
| amd | epyc_7542_firmware | < romepi_1.0.0.c | cpe:2.3:o:amd:epyc_7542_firmware:*:*:*:*:*:*:*:* |
| amd | epyc_7532_firmware | < romepi_1.0.0.c | cpe:2.3:o:amd:epyc_7532_firmware:*:*:*:*:*:*:*:* |
| amd | epyc_7502p_firmware | < romepi_1.0.0.c | cpe:2.3:o:amd:epyc_7502p_firmware:*:*:*:*:*:*:*:* |
| amd | epyc_7502_firmware | < romepi_1.0.0.c | cpe:2.3:o:amd:epyc_7502_firmware:*:*:*:*:*:*:*:* |
| amd | epyc_7452_firmware | < romepi_1.0.0.c | cpe:2.3:o:amd:epyc_7452_firmware:*:*:*:*:*:*:*:* |
| amd | epyc_7402_firmware | < romepi_1.0.0.c | cpe:2.3:o:amd:epyc_7402_firmware:*:*:*:*:*:*:*:* |
| amd | epyc_7402p_firmware | < romepi_1.0.0.c | cpe:2.3:o:amd:epyc_7402p_firmware:*:*:*:*:*:*:*:* |
| amd | epyc_7352_firmware | < romepi_1.0.0.c | cpe:2.3:o:amd:epyc_7352_firmware:*:*:*:*:*:*:*:* |
| amd | epyc_7302p_firmware | < romepi_1.0.0.c | cpe:2.3:o:amd:epyc_7302p_firmware:*:*:*:*:*:*:*:* |
| amd | epyc_7302_firmware | < romepi_1.0.0.c | cpe:2.3:o:amd:epyc_7302_firmware:*:*:*:*:*:*:*:* |
| amd | epyc_7282_firmware | < romepi_1.0.0.c | cpe:2.3:o:amd:epyc_7282_firmware:*:*:*:*:*:*:*:* |
| amd | epyc_7272_firmware | < romepi_1.0.0.c | cpe:2.3:o:amd:epyc_7272_firmware:*:*:*:*:*:*:*:* |
| amd | epyc_7262_firmware | < romepi_1.0.0.c | cpe:2.3:o:amd:epyc_7262_firmware:*:*:*:*:*:*:*:* |
| amd | epyc_7252_firmware | < romepi_1.0.0.c | cpe:2.3:o:amd:epyc_7252_firmware:*:*:*:*:*:*:*:* |
| amd | epyc_7232p_firmware | < romepi_1.0.0.c | cpe:2.3:o:amd:epyc_7232p_firmware:*:*:*:*:*:*:*:* |
| amd | epyc_7002_firmware | < romepi_1.0.0.c | cpe:2.3:o:amd:epyc_7002_firmware:*:*:*:*:*:*:*:* |
| amd | epyc_7003_firmware | < milanpi_1.0.0.4 | cpe:2.3:o:amd:epyc_7003_firmware:*:*:*:*:*:*:*:* |
| amd | epyc_72f3_firmware | < milanpi_1.0.0.4 | cpe:2.3:o:amd:epyc_72f3_firmware:*:*:*:*:*:*:*:* |
| amd | epyc_7313_firmware | < milanpi_1.0.0.4 | cpe:2.3:o:amd:epyc_7313_firmware:*:*:*:*:*:*:*:* |
| amd | epyc_7313p_firmware | < milanpi_1.0.0.4 | cpe:2.3:o:amd:epyc_7313p_firmware:*:*:*:*:*:*:*:* |
| amd | epyc_7343_firmware | < milanpi_1.0.0.4 | cpe:2.3:o:amd:epyc_7343_firmware:*:*:*:*:*:*:*:* |
| amd | epyc_7373x_firmware | < milanpi_1.0.0.4 | cpe:2.3:o:amd:epyc_7373x_firmware:*:*:*:*:*:*:*:* |
| amd | epyc_73f3_firmware | < milanpi_1.0.0.4 | cpe:2.3:o:amd:epyc_73f3_firmware:*:*:*:*:*:*:*:* |
| amd | epyc_7413_firmware | < milanpi_1.0.0.4 | cpe:2.3:o:amd:epyc_7413_firmware:*:*:*:*:*:*:*:* |
| amd | epyc_7443_firmware | < milanpi_1.0.0.4 | cpe:2.3:o:amd:epyc_7443_firmware:*:*:*:*:*:*:*:* |
| amd | epyc_7443p_firmware | < milanpi_1.0.0.4 | cpe:2.3:o:amd:epyc_7443p_firmware:*:*:*:*:*:*:*:* |
| amd | epyc_7453_firmware | < milanpi_1.0.0.4 | cpe:2.3:o:amd:epyc_7453_firmware:*:*:*:*:*:*:*:* |
| amd | epyc_74f3_firmware | < milanpi_1.0.0.4 | cpe:2.3:o:amd:epyc_74f3_firmware:*:*:*:*:*:*:*:* |
| amd | epyc_7513_firmware | < milanpi_1.0.0.4 | cpe:2.3:o:amd:epyc_7513_firmware:*:*:*:*:*:*:*:* |
| amd | epyc_7543_firmware | < milanpi_1.0.0.4 | cpe:2.3:o:amd:epyc_7543_firmware:*:*:*:*:*:*:*:* |
| amd | epyc_7543p_firmware | < milanpi_1.0.0.4 | cpe:2.3:o:amd:epyc_7543p_firmware:*:*:*:*:*:*:*:* |
| amd | epyc_7573x_firmware | < milanpi_1.0.0.4 | cpe:2.3:o:amd:epyc_7573x_firmware:*:*:*:*:*:*:*:* |
| amd | epyc_75f3_firmware | < milanpi_1.0.0.4 | cpe:2.3:o:amd:epyc_75f3_firmware:*:*:*:*:*:*:*:* |
| amd | epyc_7643_firmware | < milanpi_1.0.0.4 | cpe:2.3:o:amd:epyc_7643_firmware:*:*:*:*:*:*:*:* |
| amd | epyc_7663_firmware | < milanpi_1.0.0.4 | cpe:2.3:o:amd:epyc_7663_firmware:*:*:*:*:*:*:*:* |
| amd | epyc_7713_firmware | < milanpi_1.0.0.4 | cpe:2.3:o:amd:epyc_7713_firmware:*:*:*:*:*:*:*:* |
| amd | epyc_7713p_firmware | < milanpi_1.0.0.4 | cpe:2.3:o:amd:epyc_7713p_firmware:*:*:*:*:*:*:*:* |
| amd | epyc_7743_firmware | < milanpi_1.0.0.4 | cpe:2.3:o:amd:epyc_7743_firmware:*:*:*:*:*:*:*:* |
| amd | epyc_7763_firmware | < milanpi_1.0.0.4 | cpe:2.3:o:amd:epyc_7763_firmware:*:*:*:*:*:*:*:* |
| amd | epyc_7773x_firmware | < milanpi_1.0.0.4 | cpe:2.3:o:amd:epyc_7773x_firmware:*:*:*:*:*:*:*:* |
| URL | タグ |
|---|---|
| https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032 | Vendor Advisory |