CRITICAL🇬🇧 English

CVE-2022-23821

CVSS 9.8v3.1pub. 2023-11-14upd. 2024-11-21

Improper access control in System Management Mode (SMM) may allow an attacker to write to SPI ROM potentially leading to arbitrary code execution.

oryginał EN
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Amd Ryzen 3 3100

    HW
    Amd
    wszystkie wersje

  • Amd Ryzen 3 3100 Firmware

    OS
    Amd
    comboam4_pi_1.0.0.9comboam4_v2_pi_1.2.0.8

  • Amd Ryzen 3 3300x

    HW
    Amd
    wszystkie wersje

  • Amd Ryzen 3 3300x Firmware

    OS
    Amd
    comboam4_pi_1.0.0.9comboam4_v2_pi_1.2.0.8

  • Amd Ryzen 3 5100

    HW
    Amd
    wszystkie wersje

  • Amd Ryzen 3 5100 Firmware

    OS
    Amd
    comboam4v2_pi_1.2.0.8

  • Amd Ryzen 5 3500

    HW
    Amd
    wszystkie wersje

  • Amd Ryzen 5 3500 Firmware

    OS
    Amd
    comboam4_pi_1.0.0.9comboam4_v2_pi_1.2.0.8

  • Amd Ryzen 5 3500x

    HW
    Amd
    wszystkie wersje

  • Amd Ryzen 5 3500x Firmware

    OS
    Amd
    comboam4_pi_1.0.0.9comboam4_v2_pi_1.2.0.8

  • Amd Ryzen 5 3600

    HW
    Amd
    wszystkie wersje

  • Amd Ryzen 5 3600 Firmware

    OS
    Amd
    comboam4_pi_1.0.0.9comboam4_v2_pi_1.2.0.8

  • Amd Ryzen 5 3600x

    HW
    Amd
    wszystkie wersje

  • Amd Ryzen 5 3600x Firmware

    OS
    Amd
    comboam4_pi_1.0.0.9comboam4_v2_pi_1.2.0.8

  • Amd Ryzen 5 3600xt

    HW
    Amd
    wszystkie wersje

  • Amd Ryzen 5 3600xt Firmware

    OS
    Amd
    comboam4_pi_1.0.0.9comboam4_v2_pi_1.2.0.8

  • Amd Ryzen 5 5500

    HW
    Amd
    wszystkie wersje

  • Amd Ryzen 5 55003xd Firmware

    OS
    Amd
    comboam4v2_pi_1.2.0.8

  • Amd Ryzen 5 5500 Firmware

    OS
    Amd
    comboam4v2_pi_1.2.0.8

  • Amd Ryzen 5 5500x Firmware

    OS
    Amd
    comboam4v2_pi_1.2.0.8

  • Amd Ryzen 5 5600

    HW
    Amd
    wszystkie wersje

  • Amd Ryzen 5 56003xd

    HW
    Amd
    wszystkie wersje

  • Amd Ryzen 5 56003xd Firmware

    OS
    Amd
    comboam4_v2_pi_1.2.0.8

  • Amd Ryzen 5 5600 Firmware

    OS
    Amd
    comboam4_v2_pi_1.2.0.8

  • Amd Ryzen 5 5600x

    HW
    Amd
    wszystkie wersje

  • Amd Ryzen 5 5600x Firmware

    OS
    Amd
    comboam4_v2_pi_1.2.0.8

  • Amd Ryzen 5 Pro 3350g

    HW
    Amd
    wszystkie wersje

  • Amd Ryzen 5 Pro 3350ge

    HW
    Amd
    wszystkie wersje

  • Amd Ryzen 5 Pro 3350ge Firmware

    OS
    Amd
    comboam4_pi_1.0.0.9comboam4_v2_pi_1.2.0.8

  • Amd Ryzen 5 Pro 3350g Firmware

    OS
    Amd
    comboam4_pi_1.0.0.9comboam4_v2_pi_1.2.0.8
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
Tagi
RCE
CWE
Referencje

Powiązane podatności

CVE-2023-20571HIGH8.1ten sam produkt

A race condition in System Management Mode (SMM) code may allow an attacker using a compromised user space to ...

CVE-2023-20563HIGH7.8ten sam produkt

Insufficient protections in System Management Mode (SMM) code may allow an attacker to potentially enable esca...

CVE-2022-23820HIGH7.5ten sam produkt

Failure to validate the AMD SMM communication buffer may allow an attacker to corrupt the SMRAM potentially le...

CVE-2023-20565HIGH7.8ten sam produkt

Insufficient protections in System Management Mode (SMM) code may allow an attacker to potentially enable esca...

CVE-2023-31320HIGH7.5ten sam produkt

Improper input validation in the AMD RadeonTM Graphics display driver may allow an attacker to corrupt the dis...