Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2023-52712

Various Issues Due To Exposed SMI Handler in AmdPspP2CmboxV2. The first issue can be leveraged to bypass the protections that have been put in place by previous UEFI phases to prev

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
huawei

Description

Various Issues Due To Exposed SMI Handler in AmdPspP2CmboxV2. The first issue can be leveraged to bypass the protections that have been put in place by previous UEFI phases to prevent direct access to the SPI flash. The second issue can be used to both leak and corrupt SMM memory, thus potentially leading code execution in SMM

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Huawei CurieM-WFG9B

Default version status: unaffected

  • OTA-CurieM-B-BIOS-2.28affected

References