CVEvulnerability

CVE-2023-20558

8.8 HIGH Published 2023-04-02 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-04-02
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-670

Description

Insufficient control flow management in AmdCpmOemSmm may allow a privileged attacker to tamper with the SMM handler potentially leading to an escalation of privileges.

Affected configurations

• amd ryzen 7 5700g firmware (< comboam4 v2 pi 1.2.0.6c) • amd ryzen 7 5700ge firmware (< comboam4 v2 pi 1.2.0.6c) • amd ryzen 5 5600g firmware (< comboam4 v2 pi 1.2.0.6c) • amd ryzen 5 5600ge firmware (< comboam4 v2 pi 1.2.0.6c) • amd ryzen 3 5300g firmware (< comboam4 v2 pi 1.2.0.6c) • amd ryzen 3 5300ge firmware (< comboam4 v2 pi 1.2.0.6c) • amd ryzen 9 5980hx firmware (< cezannepi-fp6 1.0.0.9) • amd ryzen 9 5980hs firmware (< cezannepi-fp6 1.0.0.9) • amd ryzen 7 5825u firmware (< cezannepi-fp6 1.0.0.9) • amd ryzen 9 5900hx firmware (< cezannepi-fp6 1.0.0.9) • amd ryzen 9 5900hs firmware (< cezannepi-fp6 1.0.0.9) • amd ryzen 7 5825c firmware (< cezannepi-fp6 1.0.0.9) • amd ryzen 7 5800h firmware (< cezannepi-fp6 1.0.0.9) • amd ryzen 5 5625u firmware (< cezannepi-fp6 1.0.0.9) • amd ryzen 7 5800hs firmware (< cezannepi-fp6 1.0.0.9) • amd ryzen 5 5625c firmware (< cezannepi-fp6 1.0.0.9) • amd ryzen 5 5600h firmware (< cezannepi-fp6 1.0.0.9) • amd ryzen 5 5600hs firmware (< cezannepi-fp6 1.0.0.9) • amd ryzen 7 5800u firmware (< cezannepi-fp6 1.0.0.9) • amd ryzen 5 5600u firmware (< cezannepi-fp6 1.0.0.9) • amd ryzen 5 5560u firmware (< cezannepi-fp6 1.0.0.9) • amd ryzen 3 5425u firmware (< cezannepi-fp6 1.0.0.9) • amd ryzen 3 5425c firmware (< cezannepi-fp6 1.0.0.9) • amd ryzen 3 5400u firmware (< cezannepi-fp6 1.0.0.9) • amd ryzen 3 5125c firmware (< cezannepi-fp6 1.0.0.9) • amd athlon silver 3050u firmware • amd athlon gold 3150u firmware • amd ryzen 3 3200u firmware • amd ryzen 3 3250u firmware • amd ryzen 3 3300u firmware • amd ryzen 3 3350u firmware • amd ryzen 3 3450u firmware • amd ryzen 3 3500u firmware • amd ryzen 3 3500c firmware • amd ryzen 3 3550h firmware • amd ryzen 3 3580u firmware • amd ryzen 3 3700u firmware • amd ryzen 3 3700c firmware • amd ryzen 3 3750h firmware • amd ryzen 3 3780u firmware • amd ryzen 3 2200u firmware (< comboam4v2 pi 1.2.0.6c) • amd ryzen 3 2300u firmware (< comboam4v2 pi 1.2.0.6c) • amd ryzen 5 2500u firmware (< comboam4v2 pi 1.2.0.6c) • amd ryzen 5 2600 firmware (< comboam4v2 pi 1.2.0.6c) • amd ryzen 5 2600h firmware (< comboam4v2 pi 1.2.0.6c) • amd ryzen 5 2600x firmware (< comboam4v2 pi 1.2.0.6c) • amd ryzen 5 2700 firmware (< comboam4v2 pi 1.2.0.6c) • amd ryzen 5 2700x firmware (< comboam4v2 pi 1.2.0.6c) • amd ryzen 7 2700 firmware (< comboam4v2 pi 1.2.0.6c) • amd ryzen 7 2700u firmware (< comboam4v2 pi 1.2.0.6c) • amd ryzen 7 2700x firmware (< comboam4v2 pi 1.2.0.6c) • amd ryzen 7 2800h firmware (< comboam4v2 pi 1.2.0.6c) • amd ryzen 3 3300x firmware (< comboam4 v2 pi 1.2.0.6c) • amd ryzen 5 3500 firmware (< comboam4 v2 pi 1.2.0.6c) • amd ryzen 5 3500x firmware (< comboam4 v2 pi 1.2.0.6c) • amd ryzen 5 3600 firmware (< comboam4 v2 pi 1.2.0.6c) • amd ryzen 5 3600x firmware (< comboam4 v2 pi 1.2.0.6c) • amd ryzen 5 3600xt firmware (< comboam4 v2 pi 1.2.0.6c) • amd ryzen 7 3700x firmware (< comboam4 v2 pi 1.2.0.6c) • amd ryzen 7 3800x firmware (< comboam4 v2 pi 1.2.0.6c) … and 29 more

Related

Weakness · CWE (1)

  • CWE-670 Always-Incorrect Control Flow Implementation weakness

References