Insufficient protections in System Management Mode (SMM) code may allow an attacker to potentially enable escalation of privilege via local access.
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HAmd Ryzen 3 5100
HWAmdall versionsAmd Ryzen 3 5100 Firmware
OSAmd< comboam4v2_1.2.0.bAmd Ryzen 3 5125c
HWAmdall versionsAmd Ryzen 3 5125c Firmware
OSAmd< cezannepi-fp6_1.0.0.fAmd Ryzen 3 5300g
HWAmdall versionsAmd Ryzen 3 5300ge
HWAmdall versionsAmd Ryzen 3 5300ge Firmware
OSAmd< comboam4v2_1.2.0.bAmd Ryzen 3 5300g Firmware
OSAmd< comboam4v2_1.2.0.bAmd Ryzen 3 5400u
HWAmdall versionsAmd Ryzen 3 5400u Firmware
OSAmd< cezannepi-fp6_1.0.0.fAmd Ryzen 3 5425u
HWAmdall versionsAmd Ryzen 3 5425u Firmware
OSAmd< cezannepi-fp6_1.0.0.fAmd Ryzen 5 5500
HWAmdall versionsAmd Ryzen 5 5500 Firmware
OSAmd< comboam4v2_1.2.0.bAmd Ryzen 5 5500h
HWAmdall versionsAmd Ryzen 5 5500h Firmware
OSAmd< cezannepi-fp6_1.0.0.fAmd Ryzen 5 5560u
HWAmdall versionsAmd Ryzen 5 5560u Firmware
OSAmd< cezannepi-fp6_1.0.0.fAmd Ryzen 5 5600g
HWAmdall versionsAmd Ryzen 5 5600ge
HWAmdall versionsAmd Ryzen 5 5600ge Firmware
OSAmd< comboam4v2_1.2.0.bAmd Ryzen 5 5600g Firmware
OSAmd< comboam4v2_1.2.0.bAmd Ryzen 5 5600h
HWAmdall versionsAmd Ryzen 5 5600h Firmware
OSAmd< cezannepi-fp6_1.0.0.fAmd Ryzen 5 5600hs
HWAmdall versionsAmd Ryzen 5 5600hs Firmware
OSAmd< cezannepi-fp6_1.0.0.fAmd Ryzen 5 5600u
HWAmdall versionsAmd Ryzen 5 5600u Firmware
OSAmd< cezannepi-fp6_1.0.0.fAmd Ryzen 5 5625u
HWAmdall versionsAmd Ryzen 5 5625u Firmware
OSAmd< cezannepi-fp6_1.0.0.f
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
Related vulnerabilities
CVE-2022-23821CRITICAL9.8PL ✓same product
Błąd kontroli dostępu w SMM AMD umożliwiający zapis do SPI ROM i RCE
CVE-2023-20596CRITICAL9.8PL ✓same product
Błąd walidacji danych wejściowych w SMM Supervisor procesorów AMD Ryzen
CVE-2023-20571HIGH8.1same product
A race condition in System Management Mode (SMM) code may allow an attacker using a compromised user space to ...
CVE-2022-23820HIGH7.5same product
Failure to validate the AMD SMM communication buffer may allow an attacker to corrupt the SMRAM potentially le...
CVE-2023-20563HIGH7.8same product
Insufficient protections in System Management Mode (SMM) code may allow an attacker to potentially enable esca...