CVE-2021-26317 — Vulnetix

CVE-2021-26317 PUBLISHED

BRLY-2022-043 High CVE-2021-26317 The BINARLY efiXplorer team has discovered an SMM callout vulnerability on a Gigabyte device allowing a potential attacker to hijack execution flow of code running in the System Management Mode. Exploitation of this issue could lead to escalation of privileges to SMM.

EPSS 0.05% · 14.8th percentile

Risk Scores

EPSS Score

0.05%

14.8th percentile

Exploit Intelligence

CIRCL seen: CVE-2021-26317 (circl-sighting)
https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1027 (circl)

Timeline

May 10, 2022 CVE Published
May 12, 2022 PoC Published
May 13, 2022 EPSS Score
Jun 2, 2022 EPSS Score
Jul 1, 2022 EPSS Score
Aug 20, 2022 EPSS Score
Oct 9, 2022 EPSS Score
Nov 27, 2022 EPSS Score
Jan 15, 2023 EPSS Score
Mar 5, 2023 EPSS Score
Apr 23, 2023 EPSS Score
Jun 12, 2023 EPSS Score

References

SMM callout vulnerability in SMM driver on AMD-based Gigabyte devices. advisory
SMM callout vulnerability in SMM driver on AMD-based Gigabyte devices. advisory

Open in Interactive Console →