Skip to content
OpenAdvisories
Unscored CVE-2022-23821 EUVD-2022-28750GHSA-wrmf-3x8w-vcx2

Improper access control in System Management Mode (SMM) may allow an attacker to write to SPI ROM potentially leading to arbitrary code exe…

Published Nov 14, 2023 · Updated Dec 3, 2024 · Assigned by AMD

Vendor: AMD Product: AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics “Barcelo” Product: AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics "Rembrandt" Product: AMD Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphics “Barcelo-R” Product: AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics “Rembrandt-R” Product: AMD Ryzen™ Embedded 5000 Product: AMD Ryzen™ Embedded R1000 Product: AMD Ryzen™ Embedded R2000 Product: AMD Ryzen™ Embedded V1000 Product: AMD Ryzen™ Embedded V2000 Product: AMD Ryzen™Embedded V3000 Product: Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics “Picasso” AM4 Product: Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Pollock” Product: Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Dali”/”Dali” FP5 Product: Ryzen™ 3000 series Desktop Processors “Matisse" Product: Ryzen™ 3000 Series Mobile Processor with Radeon™ Graphics “Picasso” FP5 Product: Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics “Renoir” FP6 Product: Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics “Cezanne” Product: Ryzen™ 5000 Series Desktop Processors “Vermeer” Product: Ryzen™ 5000 Series Mobile processors with Radeon™ Graphics “Cezanne” Product: Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Lucienne” Product: Ryzen™ Threadripper™ 2000 Series Processors “Colfax” Product: Ryzen™ Threadripper™ 3000 Series Processors “Castle Peak” HEDT Product: Ryzen™ Threadripper™ PRO 3000WX Series Processors “Chagall” WS Product: Ryzen™ Threadripper™ PRO Processors “Castle Peak” WS SP3

Description

Improper access control in System Management Mode (SMM) may allow an attacker to write to SPI ROM potentially leading to arbitrary code execution.

Affected products

VendorProductAffectedFixed
AMD Ryzen™ 3000 Series Desktop Processors “Matisse” various —
AMD Ryzen™ 5000 Series Desktop Processors “Vermeer” various —
AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics “Cezanne” various —
AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics “Picasso” AM4 various —
AMD Ryzen™ Threadripper™ 2000 Series Processors “Colfax” various —
AMD Ryzen™ Threadripper™ 3000 Series Processors “Castle Peak” HEDT various —
AMD Ryzen™ Threadripper™ PRO Processors “Castle Peak” WS SP3 various —
AMD Ryzen™ Threadripper™ PRO 3000WX Series Processors “Chagall” WS various —
AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Dali”/”Dali” FP5 various —
AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Pollock” various —
AMD Ryzen™ 3000 Series Mobile Processor with Radeon™ Graphics “Picasso” FP5 various —
AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics “Renoir” FP6 various —
AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Lucienne” various —
AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Cezanne” various —
AMD AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics "Rembrandt" various —
AMD AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics “Rembrandt-R” various —
AMD AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics “Barcelo” various —
AMD AMD Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphics “Barcelo-R” various —
AMD AMD Ryzen™ Embedded R1000 various —
AMD AMD Ryzen™ Embedded R2000 various —
AMD AMD Ryzen™ Embedded 5000 various —
AMD AMD Ryzen™ Embedded V1000 various —
AMD AMD Ryzen™ Embedded V2000 various —
AMD AMD Ryzen™ Embedded V3000 various —

Advisories 1

References