VULNERABILITY INTELLIGENCE
CVE-2024-21981
CVSS score5.7 MEDIUM
EPSS probability0.14%
CISA KEVNot currently listed
Published2024-08-13
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N
Description
Improper key usage control in AMD Secure Processor (ASP) may allow an attacker with local access who has gained arbitrary code execution privilege in ASP to extract ASP cryptographic keys, potentially resulting in loss of confidentiality and integrity.
Weakness classification
- 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-639