Description (CNA)
An observable timing discrepancy in the ASP could allow a privileged attacker to perform a brute-force attack against the hash message authentication code, allowing arbitrary message input, potentially leading to a loss of data integrity.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| AMD / AMD Ryzen™ 3000 Series Desktop Processors | unaffected ComboAM4 1.0.0.E; unaffected ComboAM4v2PI 1.2.0.CA |
| AMD / AMD Ryzen™ 5000 Series Desktop Processors | unaffected ComboAM4v2PI 1.2.0.CA |
| AMD / AMD Ryzen™ Threadripper™ 3000 Series Processors | unaffected CastlePeakPI-SP3r3 1.0.0.C |
| AMD / AMD Ryzen™ Threadripper™ PRO 3000WX Series Processors | unaffected CastlePeakWSPI-sWRX8 1.0.0.E |
| AMD / AMD Ryzen™ Threadripper™ PRO 5000 WX-Series Processors | unaffected ChagallWSPI-sWRX8 1.0.0.9 |
CWE
CWE-208
References
ADP enrichment
No English description supplied.
No references supplied.