Description
Insufficient Verification of Data Authenticity in AGESA™ may allow an attacker to update SPI ROM data potentially resulting in denial of service or privilege escalation.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
AMD AMD Ryzen™ 3000 Series Desktop Processors
Default version status: affected
ComboAM4v2 1.2.0.Bunaffected
AMD AMD Ryzen™ 5000 Series Desktop Processors
Default version status: affected
ComboAM4v2v 1.2.0.Bunaffected
AMD AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics
Default version status: affected
ComboAM4v2 1.2.0.Bunaffected
AMD AMD Ryzen™ 7000 Series Processors
Default version status: affected
ComboAM5 1.0.0.7bunaffected
AMD AMD Ryzen™ 4000 Series Desktop Processors with Radeon™ Graphics
Default version status: affected
ComboAM4v2 1.2.0.Bunaffected
AMD AMD Ryzen™ Threadripper™ PRO 5000WX Processors
Default version status: affected
ChagallWSPI-sWRX8 1.0.0.7unaffected
AMD AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics
Default version status: affected
MendocinoPI-FT6 1.0.0.6unaffected
AMD AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics
Default version status: affected
RembrandtPI-FP7 1.0.0.9bunaffected
AMD AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics
Default version status: affected
RembrandtPI-FP7 1.0.0.9bunaffected
AMD AMD Ryzen™ 7040 Series Processors with Radeon™ Graphics
Default version status: affected
PhoenixPI-FP8-FP7 1.0.0.2unaffected
AMD AMD Ryzen™ 7045 Series Mobile Processors
Default version status: affected
DragonRangeFL1PI 1.0.0.3aunaffected
AMD AMD Ryzen™ Embedded 5000
Default version status: affected
EmbAM4PI 1.0.0.4unaffected
AMD AMD Ryzen™ Embedded V3000
Default version status: affected
EmbeddedPI-FP7r2 1.0.0.8unaffected