Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
5.7
CVE-2024-21981: AMD Secure Processor Key Theft: Confidential Data at Risk
CVE-2024-21981 · published 2 years ago
Summary
If an attacker gains control of the AMD Secure Processor, they can steal sensitive encryption keys, potentially leading to unauthorized access to confidential information. This could compromise the security of data stored on systems using the AMD Secure Processor. Affected organizations should update their systems and follow best practices for key management to mitigate this risk.
Original advisory text
Improper key usage control in AMD Secure Processor
(ASP) may allow an attacker with local access who has gained arbitrary code
execution privilege in ASP to
extract ASP cryptographic keys, potentia...
Improper key usage control in AMD Secure Processor
(ASP) may allow an attacker with local access who has gained arbitrary code
execution privilege in ASP to
extract ASP cryptographic keys, potentially resulting in loss of
confidentiality and integrity.
(ASP) may allow an attacker with local access who has gained arbitrary code
execution privilege in ASP to
extract ASP cryptographic keys, potentially resulting in loss of
confidentiality and integrity.
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker full control
Type
CWE-639Authorization Bypass Through User-Controlled Key
Timeline
Published13 Aug 2024
Updated26 Oct 2026
First seen7 Mar 2026
Sources
CVE-2024-21981 · NVD
Track software like this
Free during beta