CVEvulnerability
CVE-2023-20565
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2023-11-14
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-269
Description
Insufficient protections in System Management Mode (SMM) code may allow an attacker to potentially enable escalation of privilege via local access.
Affected configurations
• amd ryzen 3 5100 firmware (< comboam4v2 1.2.0.b)
• amd ryzen 3 5300g firmware (< comboam4v2 1.2.0.b)
• amd ryzen 3 5300ge firmware (< comboam4v2 1.2.0.b)
• amd ryzen 5 5500 firmware (< comboam4v2 1.2.0.b)
• amd ryzen 5 5600g firmware (< comboam4v2 1.2.0.b)
• amd ryzen 5 5600ge firmware (< comboam4v2 1.2.0.b)
• amd ryzen 7 5700 firmware (< comboam4v2 1.2.0.b)
• amd ryzen 7 5700g firmware (< comboam4v2 1.2.0.b)
• amd ryzen 7 5700ge firmware (< comboam4v2 1.2.0.b)
• amd ryzen 5 7500f firmware (< comboam5 1.0.7.0)
• amd ryzen 5 7600 firmware (< comboam5 1.0.7.0)
• amd ryzen 5 7600x firmware (< comboam5 1.0.7.0)
• amd ryzen 7 7700 firmware (< comboam5 1.0.7.0)
• amd ryzen 7 7700x firmware (< comboam5 1.0.7.0)
• amd ryzen 7 7800x3d firmware (< comboam5 1.0.7.0)
• amd ryzen 9 7900 firmware (< comboam5 1.0.7.0)
• amd ryzen 9 7900x firmware (< comboam5 1.0.7.0)
• amd ryzen 9 7900x3d firmware (< comboam5 1.0.7.0)
• amd ryzen 9 7950x firmware (< comboam5 1.0.7.0)
• amd ryzen 9 7950x3d firmware (< comboam5 1.0.7.0)
• amd ryzen pro 3900 firmware (< comboam5 1.0.7.0)
• amd ryzen pro 7645 firmware (< comboam5 1.0.7.0)
• amd ryzen pro 7745 firmware (< comboam5 1.0.7.0)
• amd ryzen pro 7945 firmware (< comboam5 1.0.7.0)
• amd ryzen 3 5125c firmware (< cezannepi-fp6 1.0.0.f)
• amd ryzen 3 5400u firmware (< cezannepi-fp6 1.0.0.f)
• amd ryzen 3 5425u firmware (< cezannepi-fp6 1.0.0.f)
• amd ryzen 5 5500h firmware (< cezannepi-fp6 1.0.0.f)
• amd ryzen 5 5560u firmware (< cezannepi-fp6 1.0.0.f)
• amd ryzen 5 5600h firmware (< cezannepi-fp6 1.0.0.f)
• amd ryzen 5 5600hs firmware (< cezannepi-fp6 1.0.0.f)
• amd ryzen 5 5600u firmware (< cezannepi-fp6 1.0.0.f)
• amd ryzen 5 5625u firmware (< cezannepi-fp6 1.0.0.f)
• amd ryzen 7 5800h firmware (< cezannepi-fp6 1.0.0.f)
• amd ryzen 7 5800hs firmware (< cezannepi-fp6 1.0.0.f)
• amd ryzen 7 5800u firmware (< cezannepi-fp6 1.0.0.f)
• amd ryzen 7 5825u firmware (< cezannepi-fp6 1.0.0.f)
• amd ryzen 9 5900hs firmware (< cezannepi-fp6 1.0.0.f)
• amd ryzen 9 5900hx firmware (< cezannepi-fp6 1.0.0.f)
• amd ryzen 9 5980hs firmware (< cezannepi-fp6 1.0.0.f)
• amd ryzen 9 5980hx firmware (< cezannepi-fp6 1.0.0.f)
• amd ryzen 9 6980hx firmware (< rembrandtpi-fp7 1.0.0.9)
• amd ryzen 9 6980hs firmware (< rembrandtpi-fp7 1.0.0.9)
• amd ryzen 9 6900hx firmware (< rembrandtpi-fp7 1.0.0.9)
• amd ryzen 9 6900hs firmware (< rembrandtpi-fp7 1.0.0.9)
• amd ryzen 7 6800h firmware (< rembrandtpi-fp7 1.0.0.9)
• amd ryzen 7 6800hs firmware (< rembrandtpi-fp7 1.0.0.9)
• amd ryzen 7 6800u firmware (< rembrandtpi-fp7 1.0.0.9)
• amd ryzen 5 6600h firmware (< rembrandtpi-fp7 1.0.0.9)
• amd ryzen 5 6600hs firmware (< rembrandtpi-fp7 1.0.0.9)
• amd ryzen 5 6600u firmware (< rembrandtpi-fp7 1.0.0.9)
• amd ryzen 7 7735hs firmware (< rembrandtpi-fp7 1.0.0.9)
• amd ryzen 7 7736u firmware (< rembrandtpi-fp7 1.0.0.9)
• amd ryzen 7 7735u firmware (< rembrandtpi-fp7 1.0.0.9)
• amd ryzen 5 7535hs firmware (< rembrandtpi-fp7 1.0.0.9)
• amd ryzen 5 7535u firmware (< rembrandtpi-fp7 1.0.0.9)
• amd ryzen 3 7335u firmware (< rembrandtpi-fp7 1.0.0.9)
• amd ryzen 7 pro 7730u firmware (< cezannepi-fp6 1.0.0.f)
• amd ryzen 9 pro 7940hs firmware (< phoenixpi-fp8-fp7 pi 1.0.0.1g)
• amd ryzen 9 pro 7940h firmware (< phoenixpi-fp8-fp7 pi 1.0.0.1g)
… and 11 more
Related
Weakness · CWE (1)
- CWE-269 Improper Privilege Management weakness
References
- https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4002 Vendor Advisory
- https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-5001 www.amd.com
- https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4002 Vendor Advisory
- https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-5001 www.amd.com