{"id":"CVE-2021-26360","state":"PUBLISHED","title":"An attacker with local access to the system can make unauthorized modifications of the security configuration of the SOC registers. This could allow potential corruption of AMD sec","description":"An attacker with local access to the system can make unauthorized modifications of the security configuration of the SOC registers. This could allow potential corruption of AMD secure processor’s encrypted memory contents which may lead to arbitrary code execution in ASP.","publishedAt":"2022-11-09T20:44:26.034Z","updatedAt":"2025-05-01T14:12:12.910Z","severity":{"score":7.8,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","source":"CISA-ADP"},"assigner":"AMD","products":["AMD AMD Radeon RX 6000 Series & PRO W6000 Series"],"affected":[{"vendor":"AMD","product":"AMD Radeon RX 6000 Series & PRO W6000 Series","versions":[{"version":"AMD Radeon Software","status":"affected","lessThan":"22.5.2","versionType":"custom"},{"version":"AMD Radeon Pro Software Enterprise","status":"affected","lessThan":"22.Q2","versionType":"custom"},{"version":"Enterprise Driver","status":"affected","lessThan":"22.10.20","versionType":"custom"}]}],"references":["https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1029"],"weaknesses":["CWE-284"],"ingestedAt":"2026-10-29T19:48:13.210Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2021/26xxx/CVE-2021-26360.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2021-26360","state":"PUBLISHED","datePublished":"2022-11-09T20:44:26.034Z","dateUpdated":"2025-05-01T14:12:12.910Z","assignerShortName":"AMD","assignerOrgId":"b58fc414-a1e4-4f92-9d70-1add41838648","dateReserved":"2021-01-29T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"An attacker with local access to the system can make unauthorized modifications of the security configuration of the SOC registers. This could allow potential corruption of AMD secure processor’s encrypted memory contents which may lead to arbitrary code execution in ASP."}],"affected":[{"vendor":"AMD","product":"AMD Radeon RX 6000 Series & PRO W6000 Series","versions":[{"version":"AMD Radeon Software","status":"affected","lessThan":"22.5.2","versionType":"custom"},{"version":"AMD Radeon Pro Software Enterprise","status":"affected","lessThan":"22.Q2","versionType":"custom"},{"version":"Enterprise Driver","status":"affected","lessThan":"22.10.20","versionType":"custom"}]}],"references":[{"url":"https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1029"}],"problemTypes":[{"descriptions":[{"type":"text","lang":"en","description":"TBD"}]}],"providerMetadata":{"shortName":"AMD","orgId":"b58fc414-a1e4-4f92-9d70-1add41838648","dateUpdated":"2022-11-09T00:00:00.000Z"},"datePublic":"2022-11-08T00:00:00.000Z","x_generator":{"engine":"Vulnogram 0.0.9"},"source":{"advisory":"AMD-SB-1029","discovery":"EXTERNAL"}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1029","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-03T20:26:25.015Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.8,"attackVector":"LOCAL","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"timestamp":"2025-05-01T14:11:37.852727Z","id":"CVE-2021-26360","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-284","type":"CWE","lang":"en","description":"CWE-284 Improper Access Control"}]}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-05-01T14:12:12.910Z"}}]}}}