Skip to content
Fencer Vulns
medium 5.7

CVE-2024-21981 json

Improper key usage control in AMD Secure Processor (ASP) may allow an attacker with local access who has gained arbitrary code execution pr…

published 2024-08-13 2 y ago modified 2026-06-17 4 mo ago also EUVD-2024-19587

cvss
5.7
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.1%
EPSS 0.1% chance of exploitation in 30 days, percentile 3%
public exploits
0
none known

Summary

Improper key usage control in AMD Secure Processor (ASP) may allow an attacker with local access who has gained arbitrary code execution privilege in ASP to extract ASP cryptographic keys, potentially resulting in loss of confidentiality and integrity.

CISA SSVC

Exploitation
none
Automatable
no
Technical impact
total
Assessed
2 y ago

Exploit prediction

0.14% chance of exploitation in the next 30 days, higher than 3% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
CNA 3.1 5.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N

Affected products

  • AMD AMD EPYC™ 7001 Series Processors
  • AMD AMD EPYC™ 7002 Series Processors
  • AMD AMD EPYC™ 7003 Series Processors
  • AMD AMD Ryzen™ 3000 Series Desktop Processors
  • AMD AMD Ryzen™ 5000 Series Desktop Processors
  • AMD AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics
  • AMD AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics
  • AMD AMD Ryzen™ 4000 Series Desktop Processors with Radeon™ Graphics
  • AMD AMD Ryzen™ Threadripper™ 3000 Series Processors
  • AMD AMD Ryzen™ Threadripper™ PRO 3000WX Series Processors
  • AMD AMD Ryzen™ Threadripper™ PRO 5000WX Processors
  • AMD AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics
  • AMD AMD Ryzen™ 3000 Series Mobile Processor with Radeon™ Graphics
  • AMD AMD EPYC™ Embedded 3000 Series Processors
  • AMD AMD EPYC™ Embedded 7002 Series Processors
  • AMD AMD EPYC™ Embedded 7003 Series Processors
  • AMD AMD Ryzen™ Embedded R1000 Series Processors
  • AMD AMD Ryzen™ Embedded R2000 Series Processors
  • AMD AMD Ryzen™ Embedded 5000 Series Processors
  • AMD AMD Ryzen™ Embedded V1000 Series Processors
  • amd athlon
  • amd ryzen
  • amd epyc

Classification

Weakness
  • CWE-639 Authorization Bypass Through User-Controlled Key

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.