Description (CNA)
Improper key usage control in AMD Secure Processor (ASP) may allow an attacker with local access who has gained arbitrary code execution privilege in ASP to extract ASP cryptographic keys, potentially resulting in loss of confidentiality and integrity.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| AMD / AMD EPYC™ 7001 Series Processors | affected various |
| AMD / AMD EPYC™ 7002 Series Processors | affected various |
| AMD / AMD EPYC™ 7003 Series Processors | affected various |
| AMD / AMD Ryzen™ 3000 Series Desktop Processors | affected various |
| AMD / AMD Ryzen™ 5000 Series Desktop Processors | affected various |
| AMD / AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics | affected various |
| AMD / AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics | affected various |
| AMD / AMD Ryzen™ 4000 Series Desktop Processors with Radeon™ Graphics | affected various |
| AMD / AMD Ryzen™ Threadripper™ 3000 Series Processors | affected various |
| AMD / AMD Ryzen™ Threadripper™ PRO 3000WX Series Processors | affected various |
| AMD / AMD Ryzen™ Threadripper™ PRO 5000WX Processors | affected various |
| AMD / AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics | affected various |
| AMD / AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics | affected various |
| AMD / AMD Ryzen™ 3000 Series Mobile Processor with Radeon™ Graphics | affected various |
| AMD / AMD EPYC™ Embedded 3000 Series Processors | affected various |
| AMD / AMD EPYC™ Embedded 7002 Series Processors | affected various |
| AMD / AMD EPYC™ Embedded 7003 Series Processors | affected various |
| AMD / AMD Ryzen™ Embedded R1000 Series Processors | affected various |
| AMD / AMD Ryzen™ Embedded R2000 Series Processors | affected various |
| AMD / AMD Ryzen™ Embedded 5000 Series Processors | affected various |
| AMD / AMD Ryzen™ Embedded V1000 Series Processors | affected various |
CWE
No CWE identifiers supplied.
References
ADP enrichment
No English description supplied.
No references supplied.