SEV-Legacy Firmware Vulnerability: Compromised Guest Migration and Data Loss

SEV-Legacy Firmware Vulnerability: Compromised Guest Migration and Data Loss

CVE-2021-26408 · HIGH Severity

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Insufficient validation of elliptic curve points in SEV-legacy firmware may compromise SEV-legacy guest migration potentially resulting in loss of guest's integrity or confidentiality.

Learn more about our Web Application Penetration Testing UK.