Description
Failure to validate the communication buffer and communication service in the BIOS may allow an attacker to tamper with the buffer resulting in potential SMM (System Management Mode) arbitrary code execution.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| AMD | Ryzen 5000 Series | various | — |
| AMD | Ryzen 2000 Series | various | — |
| AMD | Ryzen 3000 Series | various | — |
| AMD | 1st Gen EPYC | various | — |
| AMD | 2nd Gen EPYC | Various | — |
| AMD | 3rd Gen EPYC | various | — |
Advisories 1
- WID-SEC-2023-0061 AMD Prozessoren: Mehrere Schwachstellen BSI CERT-Bund (WID) · May 10, 2023