NetSight
critical9.8

CVE-2023-20596

Improper input validation in the SMM Supervisor may allow an attacker with a compromised SMI handler to gain Ring0 access potentially leading to arbitrary code…

Impact

Improper input validation in the SMM Supervisor may allow an attacker with a compromised SMI handler to gain Ring0 access potentially leading to arbitrary code execution.

Affected products

VendorProductAffected versions
AmdRyzen 7 5700g Firmware
before comboam4v2_1.2.0.b
AmdRyzen 7 5700ge Firmware
before comboam4v2_1.2.0.b
AmdRyzen 5 5600g Firmware
before comboam4v2_1.2.0.b
AmdRyzen 5 5600ge Firmware
before comboam4v2_1.2.0.b
AmdRyzen 3 5300g Firmware
before comboam4v2_1.2.0.b
AmdRyzen 3 5300ge Firmware
before comboam4v2_1.2.0.b
AmdRyzen 9 7950x3d Firmware
before comboam5pi_1.0.8.0
AmdRyzen 9 7950x Firmware
before comboam5pi_1.0.8.0
AmdRyzen 9 7900x3d Firmware
before comboam5pi_1.0.8.0
AmdRyzen 9 7900 Firmware
before comboam5pi_1.0.8.0
AmdRyzen 9 7900x Firmware
before comboam5pi_1.0.8.0
AmdRyzen 9 Pro 7945 Firmware
before comboam5pi_1.0.8.0

References