HIGH🇵🇱 Wersja polska

CVE-2023-20559

CVSS 8.8v3.1pub. 2023-04-02upd. 2025-02-25

Insufficient control flow management in AmdCpmGpioInitSmm may allow a privileged attacker to tamper with the SMM handler potentially leading to escalation of privileges.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

  • Amd Athlon Gold 3150u

    HW
    Amd
    all versions

  • Amd Athlon Gold 3150u Firmware

    OS
    Amd
    all versions

  • Amd Athlon Silver 3050u

    HW
    Amd
    all versions

  • Amd Athlon Silver 3050u Firmware

    OS
    Amd
    all versions

  • Amd Ryzen 3 2200u

    HW
    Amd
    all versions

  • Amd Ryzen 3 2200u Firmware

    OS
    Amd
    < comboam4v2_pi_1.2.0.6c

  • Amd Ryzen 3 2300u

    HW
    Amd
    all versions

  • Amd Ryzen 3 2300u Firmware

    OS
    Amd
    < comboam4v2_pi_1.2.0.6c

  • Amd Ryzen 3 3200u

    HW
    Amd
    all versions

  • Amd Ryzen 3 3200u Firmware

    OS
    Amd
    all versions

  • Amd Ryzen 3 3250u

    HW
    Amd
    all versions

  • Amd Ryzen 3 3250u Firmware

    OS
    Amd
    all versions

  • Amd Ryzen 3 3300u

    HW
    Amd
    all versions

  • Amd Ryzen 3 3300u Firmware

    OS
    Amd
    all versions

  • Amd Ryzen 3 3350u

    HW
    Amd
    all versions

  • Amd Ryzen 3 3350u Firmware

    OS
    Amd
    all versions

  • Amd Ryzen 3 3450u

    HW
    Amd
    all versions

  • Amd Ryzen 3 3450u Firmware

    OS
    Amd
    all versions

  • Amd Ryzen 3 3500c

    HW
    Amd
    all versions

  • Amd Ryzen 3 3500c Firmware

    OS
    Amd
    all versions

  • Amd Ryzen 3 3500u

    HW
    Amd
    all versions

  • Amd Ryzen 3 3500u Firmware

    OS
    Amd
    all versions

  • Amd Ryzen 3 3550h

    HW
    Amd
    all versions

  • Amd Ryzen 3 3550h Firmware

    OS
    Amd
    all versions

  • Amd Ryzen 3 3580u

    HW
    Amd
    all versions

  • Amd Ryzen 3 3580u Firmware

    OS
    Amd
    all versions

  • Amd Ryzen 3 3700c

    HW
    Amd
    all versions

  • Amd Ryzen 3 3700c Firmware

    OS
    Amd
    all versions

  • Amd Ryzen 3 3700u

    HW
    Amd
    all versions

  • Amd Ryzen 3 3700u Firmware

    OS
    Amd
    all versions
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2023-20596CRITICAL9.8PL ✓same product

Błąd walidacji danych wejściowych w SMM Supervisor procesorów AMD Ryzen

CVE-2022-23815HIGH7.5same product

Improper bounds checking in APCB firmware may allow an attacker to perform an out of bounds write, corrupting ...

CVE-2023-20563HIGH7.8same product

Insufficient protections in System Management Mode (SMM) code may allow an attacker to potentially enable esca...

CVE-2023-20565HIGH7.8same product

Insufficient protections in System Management Mode (SMM) code may allow an attacker to potentially enable esca...

CVE-2023-20571HIGH8.1same product

A race condition in System Management Mode (SMM) code may allow an attacker using a compromised user space to ...