CVE-2022-23821

Published: Nov 14, 2023

Modified: Dec 3, 2024

PUBLISHED

Description

Improper access control in System Management Mode (SMM) may allow an attacker to write to SPI ROM potentially leading to arbitrary code execution.

Vendor	Product	Versions
AMD	Ryzen™ 3000 Series Desktop Processors “Matisse”	affected `various`
AMD	Ryzen™ 5000 Series Desktop Processors “Vermeer”	affected `various`
AMD	Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics “Cezanne”	affected `various`
AMD	Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics “Picasso” AM4	affected `various`
AMD	Ryzen™ Threadripper™ 2000 Series Processors “Colfax”	affected `various`
AMD	Ryzen™ Threadripper™ 3000 Series Processors “Castle Peak” HEDT	affected `various`
AMD	Ryzen™ Threadripper™ PRO Processors “Castle Peak” WS SP3	affected `various`
AMD	Ryzen™ Threadripper™ PRO 3000WX Series Processors “Chagall” WS	affected `various`
AMD	Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Dali”/”Dali” FP5	affected `various`
AMD	Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Pollock”	affected `various`
AMD	Ryzen™ 3000 Series Mobile Processor with Radeon™ Graphics “Picasso” FP5	affected `various`
AMD	Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics “Renoir” FP6	affected `various`
AMD	Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Lucienne”	affected `various`
AMD	Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics “Picasso” AM4	affected `various`
AMD	Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Cezanne”	affected `various`
AMD	AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics "Rembrandt"	affected `various`
AMD	AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics “Rembrandt-R”	affected `various`
AMD	AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics “Barcelo”	affected `various`
AMD	AMD Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphics “Barcelo-R”	affected `various`
AMD	AMD Ryzen™ Embedded R1000	affected `various`
AMD	AMD Ryzen™ Embedded R2000	affected `various`
AMD	AMD Ryzen™ Embedded 5000	affected `various`
AMD	AMD Ryzen™ Embedded V1000	affected `various`
AMD	AMD Ryzen™ Embedded V2000	affected `various`
AMD	AMD Ryzen™ Embedded V3000	affected `various`

References

https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4002

vendor-advisory

https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-5001

vendor-advisory

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2022-23821

Description

Affected Products

References