CVEvulnerability
CVE-2023-20558
8.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2023-04-02
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-670
Description
Insufficient control flow management in AmdCpmOemSmm may allow a privileged attacker to tamper with the SMM handler potentially leading to an escalation of privileges.
Affected configurations
• amd ryzen 7 5700g firmware (< comboam4 v2 pi 1.2.0.6c)
• amd ryzen 7 5700ge firmware (< comboam4 v2 pi 1.2.0.6c)
• amd ryzen 5 5600g firmware (< comboam4 v2 pi 1.2.0.6c)
• amd ryzen 5 5600ge firmware (< comboam4 v2 pi 1.2.0.6c)
• amd ryzen 3 5300g firmware (< comboam4 v2 pi 1.2.0.6c)
• amd ryzen 3 5300ge firmware (< comboam4 v2 pi 1.2.0.6c)
• amd ryzen 9 5980hx firmware (< cezannepi-fp6 1.0.0.9)
• amd ryzen 9 5980hs firmware (< cezannepi-fp6 1.0.0.9)
• amd ryzen 7 5825u firmware (< cezannepi-fp6 1.0.0.9)
• amd ryzen 9 5900hx firmware (< cezannepi-fp6 1.0.0.9)
• amd ryzen 9 5900hs firmware (< cezannepi-fp6 1.0.0.9)
• amd ryzen 7 5825c firmware (< cezannepi-fp6 1.0.0.9)
• amd ryzen 7 5800h firmware (< cezannepi-fp6 1.0.0.9)
• amd ryzen 5 5625u firmware (< cezannepi-fp6 1.0.0.9)
• amd ryzen 7 5800hs firmware (< cezannepi-fp6 1.0.0.9)
• amd ryzen 5 5625c firmware (< cezannepi-fp6 1.0.0.9)
• amd ryzen 5 5600h firmware (< cezannepi-fp6 1.0.0.9)
• amd ryzen 5 5600hs firmware (< cezannepi-fp6 1.0.0.9)
• amd ryzen 7 5800u firmware (< cezannepi-fp6 1.0.0.9)
• amd ryzen 5 5600u firmware (< cezannepi-fp6 1.0.0.9)
• amd ryzen 5 5560u firmware (< cezannepi-fp6 1.0.0.9)
• amd ryzen 3 5425u firmware (< cezannepi-fp6 1.0.0.9)
• amd ryzen 3 5425c firmware (< cezannepi-fp6 1.0.0.9)
• amd ryzen 3 5400u firmware (< cezannepi-fp6 1.0.0.9)
• amd ryzen 3 5125c firmware (< cezannepi-fp6 1.0.0.9)
• amd athlon silver 3050u firmware
• amd athlon gold 3150u firmware
• amd ryzen 3 3200u firmware
• amd ryzen 3 3250u firmware
• amd ryzen 3 3300u firmware
• amd ryzen 3 3350u firmware
• amd ryzen 3 3450u firmware
• amd ryzen 3 3500u firmware
• amd ryzen 3 3500c firmware
• amd ryzen 3 3550h firmware
• amd ryzen 3 3580u firmware
• amd ryzen 3 3700u firmware
• amd ryzen 3 3700c firmware
• amd ryzen 3 3750h firmware
• amd ryzen 3 3780u firmware
• amd ryzen 3 2200u firmware (< comboam4v2 pi 1.2.0.6c)
• amd ryzen 3 2300u firmware (< comboam4v2 pi 1.2.0.6c)
• amd ryzen 5 2500u firmware (< comboam4v2 pi 1.2.0.6c)
• amd ryzen 5 2600 firmware (< comboam4v2 pi 1.2.0.6c)
• amd ryzen 5 2600h firmware (< comboam4v2 pi 1.2.0.6c)
• amd ryzen 5 2600x firmware (< comboam4v2 pi 1.2.0.6c)
• amd ryzen 5 2700 firmware (< comboam4v2 pi 1.2.0.6c)
• amd ryzen 5 2700x firmware (< comboam4v2 pi 1.2.0.6c)
• amd ryzen 7 2700 firmware (< comboam4v2 pi 1.2.0.6c)
• amd ryzen 7 2700u firmware (< comboam4v2 pi 1.2.0.6c)
• amd ryzen 7 2700x firmware (< comboam4v2 pi 1.2.0.6c)
• amd ryzen 7 2800h firmware (< comboam4v2 pi 1.2.0.6c)
• amd ryzen 3 3300x firmware (< comboam4 v2 pi 1.2.0.6c)
• amd ryzen 5 3500 firmware (< comboam4 v2 pi 1.2.0.6c)
• amd ryzen 5 3500x firmware (< comboam4 v2 pi 1.2.0.6c)
• amd ryzen 5 3600 firmware (< comboam4 v2 pi 1.2.0.6c)
• amd ryzen 5 3600x firmware (< comboam4 v2 pi 1.2.0.6c)
• amd ryzen 5 3600xt firmware (< comboam4 v2 pi 1.2.0.6c)
• amd ryzen 7 3700x firmware (< comboam4 v2 pi 1.2.0.6c)
• amd ryzen 7 3800x firmware (< comboam4 v2 pi 1.2.0.6c)
… and 29 more
Related
Weakness · CWE (1)
- CWE-670 Always-Incorrect Control Flow Implementation weakness