CVE-2023-20571

· HIGHModified

← All CVEs

CVSS v3.1

8.1

EPSS

0.45%

Published

Nov 14, 2023

Modified

Nov 21, 2024

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

A race condition in System Management Mode (SMM) code may allow an attacker using a compromised user space to leverage CVE-2018-8897 potentially resulting in privilege escalation.

CVSS Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-362

Affected Products (144)

amd · ryzen_3_5100_firmware (up to comboam4v2_1.2.0.b)vulnerable

amd · ryzen_3_5100

amd · ryzen_3_5300g_firmware (up to comboam4v2_1.2.0.b)vulnerable

amd · ryzen_3_5300g

amd · ryzen_3_5300ge_firmware (up to comboam4v2_1.2.0.b)vulnerable

amd · ryzen_3_5300ge

amd · ryzen_5_5500_firmware (up to comboam4v2_1.2.0.b)vulnerable

amd · ryzen_5_5500

amd · ryzen_5_5600g_firmware (up to comboam4v2_1.2.0.b)vulnerable

amd · ryzen_5_5600g

amd · ryzen_5_5600ge_firmware (up to comboam4v2_1.2.0.b)vulnerable

amd · ryzen_5_5600ge

amd · ryzen_7_5700_firmware (up to comboam4v2_1.2.0.b)vulnerable

amd · ryzen_7_5700

amd · ryzen_7_5700g_firmware (up to comboam4v2_1.2.0.b)vulnerable

amd · ryzen_7_5700g

amd · ryzen_7_5700ge_firmware (up to comboam4v2_1.2.0.b)vulnerable

amd · ryzen_7_5700ge

amd · ryzen_5_7500f_firmware (up to comboam5_1.0.7.0)vulnerable

amd · ryzen_5_7500f

amd · ryzen_5_7600_firmware (up to comboam5_1.0.7.0)vulnerable

amd · ryzen_5_7600

amd · ryzen_5_7600x_firmware (up to comboam5_1.0.7.0)vulnerable

amd · ryzen_5_7600x

amd · ryzen_7_7700_firmware (up to comboam5_1.0.7.0)vulnerable

amd · ryzen_7_7700

amd · ryzen_7_7700x_firmware (up to comboam5_1.0.7.0)vulnerable

amd · ryzen_7_7700x

amd · ryzen_7_7800x3d_firmware (up to comboam5_1.0.7.0)vulnerable

amd · ryzen_7_7800x3d

amd · ryzen_9_7900_firmware (up to comboam5_1.0.7.0)vulnerable

amd · ryzen_9_7900

amd · ryzen_9_7900x_firmware (up to comboam5_1.0.7.0)vulnerable

amd · ryzen_9_7900x

amd · ryzen_9_7900x3d_firmware (up to comboam5_1.0.7.0)vulnerable

amd · ryzen_9_7900x3d

amd · ryzen_9_7950x_firmware (up to comboam5_1.0.7.0)vulnerable

amd · ryzen_9_7950x

amd · ryzen_9_7950x3d_firmware (up to comboam5_1.0.7.0)vulnerable

amd · ryzen_9_7950x3d

amd · ryzen_pro_3900_firmware (up to comboam5_1.0.7.0)vulnerable

amd · ryzen_pro_3900

amd · ryzen_pro_7645_firmware (up to comboam5_1.0.7.0)vulnerable

amd · ryzen_pro_7645

amd · ryzen_pro_7745_firmware (up to comboam5_1.0.7.0)vulnerable

amd · ryzen_pro_7745

amd · ryzen_pro_7945_firmware (up to comboam5_1.0.7.0)vulnerable

amd · ryzen_pro_7945

amd · ryzen_3_5125c_firmware (up to cezannepi-fp6_1.0.0.f)vulnerable

amd · ryzen_3_5125c

...and 94 more

References (2)

https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4002

Vendor Advisory

https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4002

Vendor Advisory

KEV Catalog EPSS Scores Vendors All CVEs