First published: Tue Jan 10 2023(Updated: )
A randomly generated Initialization Vector (IV) may lead to a collision of IVs with the same key potentially resulting in information disclosure.
Credit: psirt@amd.com
Affected Software | Affected Version | How to fix |
---|---|---|
Amd Romepi Firmware | <1.0.0.a | |
Amd Romepi |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2021-26407 is a vulnerability that occurs when a randomly generated Initialization Vector (IV) may lead to a collision of IVs with the same key, potentially resulting in information disclosure.
The severity of CVE-2021-26407 is medium with a severity value of 5.5.
The affected software is Amd Romepi Firmware version up to exclusive 1.0.0.a.
CVE-2021-26407 can be exploited when a collision of IVs with the same key occurs, leading to potential information disclosure.
To fix CVE-2021-26407, it is recommended to update to a version of Amd Romepi Firmware that is not vulnerable to this issue.