目标达成 感谢每一位支持者 — 我们达成了 100% 目标!

目标: 1000 元 · 已筹: 1310

100%

CVE-2021-46747— AMD Processors 安全漏洞

AI 预测 5.6 利用难度: 困难 EPSS 0.02% · P4

影响版本矩阵 28

厂商产品版本范围状态
AMDAMD Athlon™ 3000 Series Desktop Processors with Radeon™ GraphicsComboAM4v2 PI 1.2.0.8unaffected
AMDAMD Athlon™ 3000 Series Mobile Processors with Radeon™ GraphicsPicassoPI-FP5 1.0.0.Eunaffected
AMDAMD Radeon™ PRO V520Contact your AMD Customer Engineering representativeunaffected
AMDAMD Radeon™ PRO V620Contact your AMD Customer Engineering representativeunaffected
AMDAMD Radeon™ PRO W5000 Series Graphics ProductsAMD Software: PRO Edition 25.Q3.1 (25.10.32)unaffected
AMDAMD Radeon™ PRO W6000 Series Graphics ProductsAMD Software: PRO Edition 25.Q3.1 (25.10.32)unaffected
AMDAMD Radeon™ PRO W7000 Series Graphics ProductsAMD Software: PRO Edition 25.Q3.1 (25.10.32)unaffected
AMDAMD Radeon™ RX 5000 Series Graphics ProductsAMD Software: Adrenalin Edition 25.11.1 (25.10.33.03)unaffected
AMDAMD Radeon™ RX 6000 Series Graphics ProductsAMD Software: Adrenalin Edition 25.11.1 (25.10.33.03)unaffected
AMDAMD Radeon™ RX 7000 Series Graphics ProductsAMD Software: Adrenalin Edition 25.11.1 (25.10.33.03)unaffected
AMDAMD Ryzen™ 3000 Series Desktop ProcessorsComboAM4PI 1.0.0.9/ComboAM4 V2 PI 1.2.0.8unaffected
AMDAMD Ryzen™ 3000 Series Mobile Processors with Radeon™ GraphicsPicassoPI-FP5 1.0.0.Eunaffected
AMDAMD Ryzen™ 4000 Series Desktop ProcessorsComboAM4v2 PI 1.2.0.6unaffected
AMDAMD Ryzen™ 4000 Series Mobile Processors with Radeon™ GraphicsRenoirPI-FP6 1.0.0.8unaffected
AMDAMD Ryzen™ 5000 Series Desktop ProcessorsComboAM4 V2 PI 1.2.0.8unaffected
AMDAMD Ryzen™ 5000 Series Desktop Processors with Radeon™ GraphicsComboAM4v2 PI 1.2.0.6unaffected
AMDAMD Ryzen™ 5000 Series Mobile Processors with Radeon™ GraphicsCezannePI-FP6 1.0.0.9unaffected
AMDAMD Ryzen™ 7030 Series Mobile Processors with Radeon™ GraphicsCezannePI-FP6 1.0.0.9unaffected
AMDAMD Ryzen™ Embedded 5000 Series ProcessorsEmbAM4PI 1.0.0.2unaffected
AMDAMD Ryzen™ Embedded R1000 Series ProcessorsEmbeddedPI-FP5_1.2.0.Aunaffected
AMDAMD Ryzen™ Embedded R2000 Series ProcessorsEmbeddedPI-FP5_1002unaffected
AMDAMD Ryzen™ Embedded V1000 Series Processors (formerly codenamed "Picasso")EmbeddedPI-FP5_1.2.0.Aunaffected
AMDAMD Ryzen™ Embedded V1000 Series Processors (formerly codenamed "Raven Ridge")EmbeddedPI-FP5_1.2.0.Aunaffected
AMDAMD Ryzen™ Embedded V2000 Series ProcessorsEmbeddedPI-FP6_1.0.0.6unaffected
AMDAMD Ryzen™ Embedded V3000 Series ProcessorsEmbeddedPI-FP7r2_0080unaffected
AMDAMD Ryzen™ Threadripper™ PRO 3000 WX-Series ProcessorsCastlePeakWSPI-sWRX8 1.0.0.9unaffected
ChagallWSPI-sWRX8 1.0.0.2unaffected
AMDAMD Ryzen™ Threadripper™ PRO 5000 WX-Series ProcessorsChagallWSPI-sWRX8 1.0.0.1unaffected
获取后续新漏洞提醒登录后订阅

一、 漏洞 CVE-2021-46747 基础信息

漏洞信息

对漏洞内容有疑问?看看神龙的深度分析是否有帮助!
查看神龙十问 ↗

尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。

Vulnerability Title
N/A
来源: 美国国家漏洞数据库 NVD
Vulnerability Description
Insufficient granularity of access control in ASP (AMD Secure Processor) may allow an attacker with an untrusted user space application to map sensitive SMN (System Management Network) apertures leading to a potential escalation of privileges.
来源: 美国国家漏洞数据库 NVD
CVSS Information
N/A
来源: 美国国家漏洞数据库 NVD
Vulnerability Type
CWE-1220
来源: 美国国家漏洞数据库 NVD
Vulnerability Title
AMD Processors 安全漏洞
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Description
AMD Processors是美国超威半导体(AMD)公司的一系列处理器。 AMD Processors存在安全漏洞,该漏洞源于访问控制粒度不足,可能导致攻击者利用不受信任的用户空间应用程序映射敏感的SMN孔径,从而导致权限提升。以下产品受到影响:AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics、AMD Ryzen™ Threadripper™ PRO 3000 WX-Series Processors、AMD Ryzen™ 5
来源: 中国国家信息安全漏洞库 CNNVD
CVSS Information
N/A
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Type
N/A
来源: 中国国家信息安全漏洞库 CNNVD

受影响产品

厂商产品影响版本CPE订阅
AMDAMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics PicassoPI-FP5 1.0.0.E -
AMDAMD Ryzen™ Threadripper™ PRO 3000 WX-Series Processors CastlePeakWSPI-sWRX8 1.0.0.9 -
AMDAMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics ComboAM4v2 PI 1.2.0.6 -
AMDAMD Ryzen™ Threadripper™ PRO 5000 WX-Series Processors ChagallWSPI-sWRX8 1.0.0.1 -
AMDAMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics RenoirPI-FP6 1.0.0.8 -
AMDAMD Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics PicassoPI-FP5 1.0.0.E -
AMDAMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics CezannePI-FP6 1.0.0.9 -
AMDAMD Ryzen™ 3000 Series Desktop Processors ComboAM4PI 1.0.0.9/ComboAM4 V2 PI 1.2.0.8 -
AMDAMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics ComboAM4v2 PI 1.2.0.8 -
AMDAMD Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphics CezannePI-FP6 1.0.0.9 -
AMDAMD Ryzen™ 4000 Series Desktop Processors ComboAM4v2 PI 1.2.0.6 -
AMDAMD Ryzen™ 5000 Series Desktop Processors ComboAM4 V2 PI 1.2.0.8 -
AMDAMD Ryzen™ Embedded R1000 Series Processors EmbeddedPI-FP5_1.2.0.A -
AMDAMD Ryzen™ Embedded R2000 Series Processors EmbeddedPI-FP5_1002 -
AMDAMD Ryzen™ Embedded 5000 Series Processors EmbAM4PI 1.0.0.2 -
AMDAMD Ryzen™ Embedded V1000 Series Processors (formerly codenamed "Raven Ridge") EmbeddedPI-FP5_1.2.0.A -
AMDAMD Ryzen™ Embedded V1000 Series Processors (formerly codenamed "Picasso") EmbeddedPI-FP5_1.2.0.A -
AMDAMD Ryzen™ Embedded V2000 Series Processors EmbeddedPI-FP6_1.0.0.6 -
AMDAMD Ryzen™ Embedded V3000 Series Processors EmbeddedPI-FP7r2_0080 -
AMDAMD Radeon™ RX 5000 Series Graphics Products AMD Software: Adrenalin Edition 25.11.1 (25.10.33.03) -
AMDAMD Radeon™ PRO W5000 Series Graphics Products AMD Software: PRO Edition 25.Q3.1 (25.10.32) -
AMDAMD Radeon™ RX 6000 Series Graphics Products AMD Software: Adrenalin Edition 25.11.1 (25.10.33.03) -
AMDAMD Radeon™ RX 7000 Series Graphics Products AMD Software: Adrenalin Edition 25.11.1 (25.10.33.03) -
AMDAMD Radeon™ PRO W6000 Series Graphics Products AMD Software: PRO Edition 25.Q3.1 (25.10.32) -
AMDAMD Radeon™ PRO W7000 Series Graphics Products AMD Software: PRO Edition 25.Q3.1 (25.10.32) -
AMDAMD Radeon™ PRO V520 Contact your AMD Customer Engineering representative -
AMDAMD Radeon™ PRO V620 Contact your AMD Customer Engineering representative -

二、漏洞 CVE-2021-46747 的公开POC

#POC 描述源链接神龙链接
AI 生成 POC高级

未找到公开 POC。

登录以生成 AI POC

三、漏洞 CVE-2021-46747 的情报信息

登录查看更多情报信息。

CVE-2021-46747 厂商安全公告 (1)

IV. Related Vulnerabilities

V. Comments for CVE-2021-46747

暂无评论


发表评论