Description
A potential vulnerability in AMD System Management Mode (SMM) interrupt handler may allow an attacker with high privileges to access the SMM resulting in arbitrary code execution which could be used by malicious actors to bypass security mechanisms provided in the UEFI firmware.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| AMD | 2nd Gen EPYC | Various | — |
| AMD | 3rd Gen EPYC | various | — |
| AMD | Ryzen 2000 Series | various | — |
| AMD | Ryzen 3000 Series | Various | — |
| AMD | Ryzen 5000 Series | various | — |
Advisories 3
- WID-SEC-2022-0073 AMD Prozessoren: Mehrere Schwachstellen BSI CERT-Bund (WID) · Feb 16, 2025
- WID-SEC-2023-0061 AMD Prozessoren: Mehrere Schwachstellen BSI CERT-Bund (WID) · May 10, 2023
- WID-SEC-2023-0165 HP BIOS UEFI Firmware: Mehrere Schwachstellen ermöglichen Privilegieneskalation BSI CERT-Bund (WID) · Jan 22, 2023