Critical severity · published Nov 14, 2023
CVE-2022-23821
Improper access control in System Management Mode (SMM) may allow an attacker to write to SPI ROM potentially leading to arbitrary code execution
9.8
CVSS
1%
EPSS
No
On KEV
Description
Improper access control in System Management Mode (SMM) may allow an attacker to write to SPI ROM potentially leading to arbitrary code execution.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.0% · higher than 62% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
A3
Athlon 3015ce Firmware · Amd
pollockpi-ft5_1.0.0.5 · source: NVD
A3
Athlon 3015e Firmware · Amd
pollockpi-ft5_1.0.0.5 · source: NVD
R3
Ryzen 3 3100 Firmware · Amd
comboam4_pi_1.0.0.9; comboam4_v2_pi_1.2.0.8 · source: NVD
R3
Ryzen 3 3200u Firmware · Amd
picassopi-fp5_1.0.0.e · source: NVD
R3
Ryzen 3 3250c Firmware · Amd
picassopi-fp5_1.0.0.e · source: NVD
R3
Ryzen 3 3250u Firmware · Amd
picassopi-fp5_1.0.0.e · source: NVD
R3
Ryzen 3 3300x Firmware · Amd
comboam4_pi_1.0.0.9; comboam4_v2_pi_1.2.0.8 · source: NVD
R3
Ryzen 3 5100 Firmware · Amd
comboam4v2_pi_1.2.0.8 · source: NVD
R5
Ryzen 5 3450u Firmware · Amd
picassopi-fp5_1.0.0.e · source: NVD
R5
Ryzen 5 3500 Firmware · Amd
comboam4_pi_1.0.0.9; comboam4_v2_pi_1.2.0.8 · source: NVD
R5
Ryzen 5 3500c Firmware · Amd
picassopi-fp5_1.0.0.e · source: NVD
R5
Ryzen 5 3500u Firmware · Amd
picassopi-fp5_1.0.0.e · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-23821
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-23821
Third Party Advisory
https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4002
www.amd.com
https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-5001
More from Athlon 3015ce Firmware
9.8
CVE-2022-23820
Failure to validate the AMD SMM communication buffer may allow an attacker to corrupt the SMRAM potentially leading to arbitrary code execution