CVE-2021-46747
📛 CVE Title
(no title)
Description
Insufficient granularity of access control in ASP (AMD Secure Processor) may allow an attacker with an untrusted user space application to map sensitive SMN (System Management Network) apertures leading to a potential escalation of privileges.
Overview
- State
- —
- Assigner (CNA)
- —
- CVSS severity
- high
- CVSS score
- 8.8 / 10
- CVSS vector
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H- Effective score
- 8.8 / 10 HIGH source: CNA overview
- CWE(s)
- —
- Reserved
- —
- Published
- —
- Last updated
- —
- Source
- https://www.tenable.com/cve/CVE-2021-46747
- Linked Threat
- CVE-2021-46747 — CVE-2021-46747
NVD triage scoring NVD CVE 2.0
Layer NVD adds on top of the CNA's CVE record — published / last-modified timestamps, exploitability / impact subscores, and the FIRST.org EPSS probability that this CVE will be exploited in the wild in the next 30 days.
- NVD published
- 2026-06-01 21:16:23 UTC
- NVD last modified
- 2026-07-22 08:10:00 UTC
- EPSS score
- 0.0010 (probability of exploitation in next 30 days)
- EPSS percentile
- 0.88% vs all CVEs — higher = more likely to be exploited, as of 2026-07-27
NVD-assigned CWE(s):
CWE-1220
(differs from the CNA list above)
NVD / KEV / EPSS data refreshed 2026-07-27 21:35 UTC. Re-run the 🛰 Backfill from NVD button above to refresh.
European Union Vulnerability Database ENISA EUVD
ENISA's official EU repository for curated vulnerability intelligence. Carries a separate identifier (EUVD-YYYY-NNNN) and frequently exposes an earlier-published description + CVSS than NVD does.
- EUVD ID
-
EUVD-2021-34843 - Assigner
- AMD
- Published
- Jun 1, 2026, 7:01:27 PM
- Updated
- Jun 2, 2026, 1:45:20 PM
- EUVD base score (CVSS 4.0)
-
7.1 / 10
CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N - EUVD-reported EPSS
- 0.1000
- Vendors
- AMD
- Products
-
AMD Ryzen™ Threadripper™ PRO 3000 WX-Series Processors (patch: ChagallWSPI-sWRX8 1.0.0.2)AMD Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics (patch: PicassoPI-FP5 1.0.0.E)AMD Radeon™ RX 5000 Series Graphics Products (patch: AMD Software: Adrenalin Edition 25.11.1 (25.10.33.03))AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics (patch: ComboAM4v2 PI 1.2.0.6)AMD Radeon™ RX 6000 Series Graphics Products (patch: AMD Software: Adrenalin Edition 25.11.1 (25.10.33.03))AMD Ryzen™ Embedded R2000 Series Processors (patch: EmbeddedPI-FP5_1002)AMD Ryzen™ Embedded V3000 Series Processors (patch: EmbeddedPI-FP7r2_0080)AMD Ryzen™ Embedded V1000 Series Processors (formerly codenamed "Raven Ridge") (patch: EmbeddedPI-FP5_1.2.0.A)AMD Ryzen™ Embedded V2000 Series Processors (patch: EmbeddedPI-FP6_1.0.0.6)AMD Ryzen™ 5000 Series Desktop Processors (patch: ComboAM4 V2 PI 1.2.0.8)AMD Ryzen™ Embedded V1000 Series Processors (formerly codenamed "Picasso") (patch: EmbeddedPI-FP5_1.2.0.A)AMD Radeon™ RX 7000 Series Graphics Products (patch: AMD Software: Adrenalin Edition 25.11.1 (25.10.33.03))AMD Ryzen™ Threadripper™ PRO 3000 WX-Series Processors (patch: CastlePeakWSPI-sWRX8 1.0.0.9)AMD Ryzen™ 4000 Series Desktop Processors (patch: ComboAM4v2 PI 1.2.0.6)AMD Ryzen™ Embedded 5000 Series Processors (patch: EmbAM4PI 1.0.0.2)AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics (patch: ComboAM4v2 PI 1.2.0.8)AMD Radeon™ PRO W7000 Series Graphics Products (patch: AMD Software: PRO Edition 25.Q3.1 (25.10.32))AMD Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphics (patch: CezannePI-FP6 1.0.0.9)AMD Ryzen™ Threadripper™ PRO 5000 WX-Series Processors (patch: ChagallWSPI-sWRX8 1.0.0.1)AMD Radeon™ PRO W6000 Series Graphics Products (patch: AMD Software: PRO Edition 25.Q3.1 (25.10.32))AMD Ryzen™ Embedded R1000 Series Processors (patch: EmbeddedPI-FP5_1.2.0.A)AMD Radeon™ PRO W5000 Series Graphics Products (patch: AMD Software: PRO Edition 25.Q3.1 (25.10.32))AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics (patch: PicassoPI-FP5 1.0.0.E)AMD Ryzen™ 3000 Series Desktop Processors (patch: ComboAM4PI 1.0.0.9/ComboAM4 V2 PI 1.2.0.8)AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics (patch: CezannePI-FP6 1.0.0.9)AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics (patch: RenoirPI-FP6 1.0.0.8)AMD Radeon™ PRO V520 (patch: Contact your AMD Customer Engineering representative)AMD Radeon™ PRO V620 (patch: Contact your AMD Customer Engineering representative)
- Aliases
-
GHSA-59gr-g8qh-wf7f
ENISA description: Insufficient granularity of access control in ASP (AMD Secure Processor) may allow an attacker with an untrusted user space application to map sensitive SMN (System Management Network) apertures leading to a potential escalation of privileges.
Vendor references (0)
References embedded in the original CVE record by the assigning CNA.
None in the CVE record.
Web references (5)
DuckDuckGo results ranked by threat-intel / vendor advisory domains. Generated by the 🔎 Find references (web) button above — same flow as the Remediations search.
- https://nvd.nist.gov/vuln/detail/CVE-2021-46747 tenable:nvd.nist.gov
- https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-4017.html tenable:www.amd.com
- https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-6027.html tenable:www.amd.com
- https://www.cve.org/CVERecord?id=CVE-2021-46747 tenable:www.cve.org
- https://www.first.org/epss/ tenable:www.first.org
NVD-tagged references (2)
Reference list NVD curates from the CNA record, vendor advisories, and third-party reports. The tag chips below are NVD's analyst-assigned categories.
Remediations (10)
Remediations are stored against the linked Threat row; the list below is deduplicated across both pages.
-
web:jumpcloud.com
Master patch compliance with this technical guide covering vulnerability scanning, deployment processes, key metrics, and remediation best practices.
2026-06-19 02:32 UTC -
web:msrc.microsoft.com
Security Update Guide - Microsoft Security Response Center
2026-06-19 02:32 UTC -
web:portal.msrc.microsoft.com
The Security Update Guide provides information on the latest Microsoft security updates, helping users understand and address potential vulnerabilities effectively.
2026-06-19 02:32 UTC -
web:securityboulevard.com
Cybersecurity vulnerabilities pose significant risks to organizations in today's digital landscape. Left unaddressed, these vulnerabilities can lead to data breaches, financial losses, and reputational damage. Organizations must decide how to tackle vulnerabilities—through remediation , mitigation , or a combination of both. But which strategy is more effective? This blog explores the ...
2026-06-19 02:32 UTC -
web:www.cve.org
At cve .org, we provide the authoritative reference method for publicly known information-security vulnerabilities and exposures
2026-06-19 02:32 UTC -
web:www.mend.io
Practical guide to vulnerability remediation for developers & security teams. Learn how to detect, prioritize, fix , & monitor vulnerabilities.
2026-06-19 02:32 UTC -
web:www.oracle.com
This Critical Patch Update contains 374 new security patches across the product families listed below. Please note that an MOS note summarizing the content of this Critical Patch Update and other Oracle Software Security Assurance activities is located at October 2025 Critical Patch Update: Executive Summary and Analysis.
2026-06-19 02:32 UTC -
web:www.oracle.com
This Critical Security Patch Update contains 35 new security patches across the product families listed below. Please note that an MOS note summarizing the content of this Critical Security Patch Update and other Oracle Software Security Assurance activities is located at May 2026 Critical Security Patch Update: Executive Summary and Analysis.
2026-06-19 02:32 UTC -
web:www.secure.com
Remediation fully removes a vulnerability by fixing its root cause — through a patch , code fix , or system replacement. Mitigation reduces the risk of exploitation without removing the flaw itself, using controls like network segmentation or access restrictions.
2026-06-19 02:32 UTC -
web:www.veeam.com
When a vulnerability is identified, our team promptly develops a patch to address and mitigate the risk. In line with our dedication to transparency, we publicly disclose the vulnerability and provide detailed mitigation information.
2026-06-19 02:32 UTC
AI Forensic Analysis
Only Available for Registered Users. Sign in to view.