high7.8
CVE-2023-20565
Insufficient protections in System Management Mode (SMM) code may allow an attacker to potentially enable escalation of privilege via local access.
Impact
Insufficient protections in System Management Mode (SMM) code may allow an attacker to potentially enable escalation of privilege via local access.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Amd | Ryzen 3 5100 Firmware | before comboam4v2_1.2.0.b |
| Amd | Ryzen 3 5300g Firmware | before comboam4v2_1.2.0.b |
| Amd | Ryzen 3 5300ge Firmware | before comboam4v2_1.2.0.b |
| Amd | Ryzen 5 5500 Firmware | before comboam4v2_1.2.0.b |
| Amd | Ryzen 5 5600g Firmware | before comboam4v2_1.2.0.b |
| Amd | Ryzen 5 5600ge Firmware | before comboam4v2_1.2.0.b |
| Amd | Ryzen 7 5700 Firmware | before comboam4v2_1.2.0.b |
| Amd | Ryzen 7 5700g Firmware | before comboam4v2_1.2.0.b |
| Amd | Ryzen 7 5700ge Firmware | before comboam4v2_1.2.0.b |
| Amd | Ryzen 5 7500f Firmware | before comboam5_1.0.7.0 |
| Amd | Ryzen 5 7600 Firmware | before comboam5_1.0.7.0 |
| Amd | Ryzen 5 7600x Firmware | before comboam5_1.0.7.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4002
- https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-5001
- https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4002
- https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-5001