critical9.8
CVE-2022-23821
Improper access control in System Management Mode (SMM) may allow an attacker to write to SPI ROM potentially leading to arbitrary code execution.
Impact
Improper access control in System Management Mode (SMM) may allow an attacker to write to SPI ROM potentially leading to arbitrary code execution.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Amd | Ryzen 9 3900 Firmware | Versions comboam4_pi_1.0.0.9, comboam4_v2_pi_1.2.0.8 |
| Amd | Ryzen 9 3900x Firmware | Versions comboam4_pi_1.0.0.9, comboam4_v2_pi_1.2.0.8 |
| Amd | Ryzen 9 3900xt Firmware | Versions comboam4_pi_1.0.0.9, comboam4_v2_pi_1.2.0.8 |
| Amd | Ryzen 9 3950x Firmware | Versions comboam4_pi_1.0.0.9, comboam4_v2_pi_1.2.0.8 |
| Amd | Ryzen 7 3700x Firmware | Versions comboam4_pi_1.0.0.9, comboam4_v2_pi_1.2.0.8 |
| Amd | Ryzen 7 3800x Firmware | Versions comboam4_pi_1.0.0.9, comboam4_v2_pi_1.2.0.8 |
| Amd | Ryzen 7 3800xt Firmware | Versions comboam4_pi_1.0.0.9, comboam4_v2_pi_1.2.0.8 |
| Amd | Ryzen 5 3500 Firmware | Versions comboam4_pi_1.0.0.9, comboam4_v2_pi_1.2.0.8 |
| Amd | Ryzen 5 3500x Firmware | Versions comboam4_pi_1.0.0.9, comboam4_v2_pi_1.2.0.8 |
| Amd | Ryzen 5 3600 Firmware | Versions comboam4_pi_1.0.0.9, comboam4_v2_pi_1.2.0.8 |
| Amd | Ryzen 5 3600x Firmware | Versions comboam4_pi_1.0.0.9, comboam4_v2_pi_1.2.0.8 |
| Amd | Ryzen 5 3600xt Firmware | Versions comboam4_pi_1.0.0.9, comboam4_v2_pi_1.2.0.8 |
References
- NVD record
- CVE.org record
- https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4002
- https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-5001
- https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4002
- https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-5001