Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2022-23821

Improper access control in System Management Mode (SMM) may allow an attacker to write to SPI ROM potentially leading to arbitrary code execution.

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
AMD

Description

Improper access control in System Management Mode (SMM) may allow an attacker to write to SPI ROM potentially leading to arbitrary code execution.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

AMD Ryzen™ 3000 Series Desktop Processors “Matisse”

Default version status: unaffected

  • various affected

AMD Ryzen™ 5000 Series Desktop Processors “Vermeer”

Default version status: unaffected

  • various affected

AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics “Cezanne”

Default version status: unaffected

  • various affected

AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics “Picasso” AM4

Default version status: unaffected

  • various affected

AMD Ryzen™ Threadripper™ 2000 Series Processors “Colfax”

Default version status: unaffected

  • various affected

AMD Ryzen™ Threadripper™ 3000 Series Processors “Castle Peak” HEDT

Default version status: unaffected

  • various affected

AMD Ryzen™ Threadripper™ PRO Processors “Castle Peak” WS SP3

Default version status: unaffected

  • various affected

AMD Ryzen™ Threadripper™ PRO 3000WX Series Processors “Chagall” WS

Default version status: unaffected

  • various affected

AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Dali”/”Dali” FP5

Default version status: unaffected

  • various affected

AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Pollock”

Default version status: unaffected

  • various affected

AMD Ryzen™ 3000 Series Mobile Processor with Radeon™ Graphics “Picasso” FP5

Default version status: unaffected

  • various affected

AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics “Renoir” FP6

Default version status: unaffected

  • various affected

AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Lucienne”

Default version status: unaffected

  • various affected

AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics “Picasso” AM4

Default version status: unaffected

  • various affected

AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Cezanne”

Default version status: unaffected

  • various affected

AMD AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics "Rembrandt"

Default version status: unaffected

  • various affected

AMD AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics “Rembrandt-R”

Default version status: unaffected

  • various affected

AMD AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics “Barcelo”

Default version status: unaffected

  • various affected

AMD AMD Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphics “Barcelo-R”

Default version status: unaffected

  • various affected

AMD AMD Ryzen™ Embedded R1000

Default version status: unaffected

  • various affected

AMD AMD Ryzen™ Embedded R2000

Default version status: unaffected

  • various affected

AMD AMD Ryzen™ Embedded 5000

Default version status: unaffected

  • various affected

AMD AMD Ryzen™ Embedded V1000

Default version status: unaffected

  • variousaffected

AMD AMD Ryzen™ Embedded V2000

Default version status: unaffected

  • variousaffected

AMD AMD Ryzen™ Embedded V3000

Default version status: unaffected

  • variousaffected

References