AMD Ryzen⢠5000 Series Desktop Processor with Radeon⢠Graphics Formerly codenamed âCezanneâ AM4
At a glance
- Source
- NVD
- EPSS
- EPSS 1.04 % ¡ percentile 64 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- AMD
- NVD status
- Modified
Description
Improper input validation in the SMM Supervisor may allow an attacker with a compromised SMI handler to gain Ring0 access potentially leading to arbitrary code execution.
References
Scores
| Version | Score | Vector | Scored by |
|---|---|---|---|
| CVSS 3.1 | CRITICAL 9.8 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H | NVD ¡ nvd@nist.gov (Primary) |
European references
- ENISA EUVD ¡ EUVD-2023-24775
- GCVE ¡ GCVE-0-2023-20596
Affected configurations (NVD CPE)
cpe:2.3:o:amd:ryzen_7_5700g_firmware:*:*:*:*:*:*:*:*< comboam4v2_1.2.0.bcpe:2.3:o:amd:ryzen_7_5700ge_firmware:*:*:*:*:*:*:*:*< comboam4v2_1.2.0.bcpe:2.3:o:amd:ryzen_5_5600g_firmware:*:*:*:*:*:*:*:*< comboam4v2_1.2.0.bcpe:2.3:o:amd:ryzen_5_5600ge_firmware:*:*:*:*:*:*:*:*< comboam4v2_1.2.0.bcpe:2.3:o:amd:ryzen_3_5300g_firmware:*:*:*:*:*:*:*:*< comboam4v2_1.2.0.bcpe:2.3:o:amd:ryzen_3_5300ge_firmware:*:*:*:*:*:*:*:*< comboam4v2_1.2.0.bcpe:2.3:o:amd:ryzen_9_7950x3d_firmware:*:*:*:*:*:*:*:*< comboam5pi_1.0.8.0cpe:2.3:o:amd:ryzen_9_7950x_firmware:*:*:*:*:*:*:*:*< comboam5pi_1.0.8.0cpe:2.3:o:amd:ryzen_9_7900x3d_firmware:*:*:*:*:*:*:*:*< comboam5pi_1.0.8.0cpe:2.3:o:amd:ryzen_9_7900_firmware:*:*:*:*:*:*:*:*< comboam5pi_1.0.8.0cpe:2.3:o:amd:ryzen_9_7900x_firmware:*:*:*:*:*:*:*:*< comboam5pi_1.0.8.0cpe:2.3:o:amd:ryzen_9_pro_7945_firmware:*:*:*:*:*:*:*:*< comboam5pi_1.0.8.0cpe:2.3:o:amd:ryzen_7_7800x3d_firmware:*:*:*:*:*:*:*:*< comboam5pi_1.0.8.0cpe:2.3:o:amd:ryzen_7_7700x_firmware:*:*:*:*:*:*:*:*< comboam5pi_1.0.8.0cpe:2.3:o:amd:ryzen_7_7700_firmware:*:*:*:*:*:*:*:*< comboam5pi_1.0.8.0cpe:2.3:o:amd:ryzen_7_pro_7745_firmware:*:*:*:*:*:*:*:*< comboam5pi_1.0.8.0cpe:2.3:o:amd:ryzen_5_7600x_firmware:*:*:*:*:*:*:*:*< comboam5pi_1.0.8.0cpe:2.3:o:amd:ryzen_5_7600_firmware:*:*:*:*:*:*:*:*< comboam5pi_1.0.8.0cpe:2.3:o:amd:ryzen_5_pro_7645_firmware:*:*:*:*:*:*:*:*< comboam5pi_1.0.8.0cpe:2.3:o:amd:ryzen_5_7500f_firmware:*:*:*:*:*:*:*:*< comboam5pi_1.0.8.0cpe:2.3:o:amd:ryzen_9_5980hx_firmware:*:*:*:*:*:*:*:*< cezannepi-fp6_1.0.0.facpe:2.3:o:amd:ryzen_9_5980hs_firmware:*:*:*:*:*:*:*:*< cezannepi-fp6_1.0.0.facpe:2.3:o:amd:ryzen_9_5900hx_firmware:*:*:*:*:*:*:*:*< cezannepi-fp6_1.0.0.facpe:2.3:o:amd:ryzen_9_5900hs_firmware:*:*:*:*:*:*:*:*< cezannepi-fp6_1.0.0.facpe:2.3:o:amd:ryzen_7_5800h_firmware:*:*:*:*:*:*:*:*< cezannepi-fp6_1.0.0.facpe:2.3:o:amd:ryzen_7_5800hs_firmware:*:*:*:*:*:*:*:*< cezannepi-fp6_1.0.0.facpe:2.3:o:amd:ryzen_7_5825u_firmware:*:*:*:*:*:*:*:*< cezannepi-fp6_1.0.0.facpe:2.3:o:amd:ryzen_7_5800u_firmware:*:*:*:*:*:*:*:*< cezannepi-fp6_1.0.0.facpe:2.3:o:amd:ryzen_5_5600h_firmware:*:*:*:*:*:*:*:*< cezannepi-fp6_1.0.0.facpe:2.3:o:amd:ryzen_5_5600hs_firmware:*:*:*:*:*:*:*:*< cezannepi-fp6_1.0.0.facpe:2.3:o:amd:ryzen_5_5625u_firmware:*:*:*:*:*:*:*:*< cezannepi-fp6_1.0.0.facpe:2.3:o:amd:ryzen_5_5600u_firmware:*:*:*:*:*:*:*:*< cezannepi-fp6_1.0.0.facpe:2.3:o:amd:ryzen_5_5560u_firmware:*:*:*:*:*:*:*:*< cezannepi-fp6_1.0.0.facpe:2.3:o:amd:ryzen_5_5500h_firmware:*:*:*:*:*:*:*:*< cezannepi-fp6_1.0.0.facpe:2.3:o:amd:ryzen_3_5425u_firmware:*:*:*:*:*:*:*:*< cezannepi-fp6_1.0.0.facpe:2.3:o:amd:ryzen_3_5400u_firmware:*:*:*:*:*:*:*:*< cezannepi-fp6_1.0.0.facpe:2.3:o:amd:ryzen_3_5125c_firmware:*:*:*:*:*:*:*:*< cezannepi-fp6_1.0.0.facpe:2.3:o:amd:ryzen_9_6980hx_firmware:*:*:*:*:*:*:*:*< rembrandtpi-fp7_1.0.0.9bcpe:2.3:o:amd:ryzen_9_6980hs_firmware:*:*:*:*:*:*:*:*< rembrandtpi-fp7_1.0.0.9bcpe:2.3:o:amd:ryzen_9_6900hx_firmware:*:*:*:*:*:*:*:*< rembrandtpi-fp7_1.0.0.9b- +24 more
Affected products
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST â attribution requested |
| ENISA EUVD | ENISA â reproduction authorised, source acknowledged |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain â this product uses data from the NVD API but is not endorsed or certified by the NVD |