CVE-2023-20558

🗓️ 23 Mar 2023 18:50:11Reported by AMDType

Insufficient control flow management in AmdCpmOemSmm may allow a privileged attacker to tamper with the SMM handler potentially leading to an escalation of privileges

Reporter	Title	Published	Views	Family All 10
Amd	AMD Client Vulnerabilities – May 2022	10 May 202200:00	–	amd
CNNVD	AMD Ryzen 2000 安全漏洞	2 Apr 202300:00	–	cnnvd
Cvelist	CVE-2023-20558	23 Mar 202318:50	–	cvelist
EUVD	EUVD-2023-24737	3 Oct 202520:07	–	euvd
NVD	CVE-2023-20558	2 Apr 202321:15	–	nvd
OSV	CVE-2023-20558	2 Apr 202321:15	–	osv
Prion	Design/Logic Flaw	2 Apr 202321:15	–	prion
Positive Technologies	PT-2023-17457 · Amd · Amdcpmoemsmm	23 Mar 202300:00	–	ptsecurity
Redos	ROS-20250814-09	14 Aug 202500:00	–	redos
Vulnrichment	CVE-2023-20558	23 Mar 202318:50	–	vulnrichment

NVD

Node

amd ryzen_7_5700g_firmwareRange<comboam4_v2_pi_1.2.0.6c

AND

amd ryzen_7_5700gMatch-

Node

amd ryzen_7_5700ge_firmwareRange<comboam4_v2_pi_1.2.0.6c

AND

amd ryzen_7_5700geMatch-

Node

amd ryzen_5_5600g_firmwareRange<comboam4_v2_pi_1.2.0.6c

AND

amd ryzen_5_5600gMatch-

Node

amd ryzen_5_5600ge_firmwareRange<comboam4_v2_pi_1.2.0.6c

AND

amd ryzen_5_5600geMatch-

Node

amd ryzen_3_5300g_firmwareRange<comboam4_v2_pi_1.2.0.6c

AND

amd ryzen_3_5300gMatch-

Node

amd ryzen_3_5300ge_firmwareRange<comboam4_v2_pi_1.2.0.6c

AND

amd ryzen_3_5300geMatch-

Node

amd ryzen_9_5980hx_firmwareRange<cezannepi-fp6_1.0.0.9

AND

amd ryzen_9_5980hxMatch-

Node

amd ryzen_9_5980hs_firmwareRange<cezannepi-fp6_1.0.0.9

AND

amd ryzen_9_5980hsMatch-

Node

amd ryzen_7_5825u_firmwareRange<cezannepi-fp6_1.0.0.9

AND

amd ryzen_7_5825uMatch-

Node

amd ryzen_9_5900hx_firmwareRange<cezannepi-fp6_1.0.0.9

AND

amd ryzen_9_5900hxMatch-

Node

amd ryzen_9_5900hs_firmwareRange<cezannepi-fp6_1.0.0.9

AND

amd ryzen_9_5900hsMatch-

Node

amd ryzen_7_5825c_firmwareRange<cezannepi-fp6_1.0.0.9

AND

amd ryzen_7_5825cMatch-

Node

amd ryzen_7_5800h_firmwareRange<cezannepi-fp6_1.0.0.9

AND

amd ryzen_7_5800hMatch-

Node

amd ryzen_5_5625u_firmwareRange<cezannepi-fp6_1.0.0.9

AND

amd ryzen_5_5625uMatch-

Node

amd ryzen_7_5800hs_firmwareRange<cezannepi-fp6_1.0.0.9

AND

amd ryzen_7_5800hsMatch-

Node

amd ryzen_5_5625c_firmwareRange<cezannepi-fp6_1.0.0.9

AND

amd ryzen_5_5625cMatch-

Node

amd ryzen_5_5600h_firmwareRange<cezannepi-fp6_1.0.0.9

AND

amd ryzen_5_5600hMatch-

Node

amd ryzen_5_5600hs_firmwareRange<cezannepi-fp6_1.0.0.9

AND

amd ryzen_5_5600hsMatch-

Node

amd ryzen_7_5800u_firmwareRange<cezannepi-fp6_1.0.0.9

AND

amd ryzen_7_5800uMatch-

Node

amd ryzen_5_5600u_firmwareRange<cezannepi-fp6_1.0.0.9

AND

amd ryzen_5_5600uMatch-

Node

amd ryzen_5_5560u_firmwareRange<cezannepi-fp6_1.0.0.9

AND

amd ryzen_5_5560uMatch-

Node

amd ryzen_3_5425u_firmwareRange<cezannepi-fp6_1.0.0.9

AND

amd ryzen_3_5425uMatch-

Node

amd ryzen_3_5425c_firmwareRange<cezannepi-fp6_1.0.0.9

AND

amd ryzen_3_5425cMatch-

Node

amd ryzen_3_5400u_firmwareRange<cezannepi-fp6_1.0.0.9

AND

amd ryzen_3_5400uMatch-

Node

amd ryzen_3_5125c_firmwareRange<cezannepi-fp6_1.0.0.9

AND

amd ryzen_3_5125cMatch-

Node

amd athlon_silver_3050u_firmwareMatch-

AND

amd athlon_silver_3050uMatch-

Node

amd athlon_gold_3150u_firmwareMatch-

AND

amd athlon_gold_3150uMatch-

Node

amd ryzen_3_3200u_firmwareMatch-

AND

amd ryzen_3_3200uMatch-

Node

amd ryzen_3_3250u_firmwareMatch-

AND

amd ryzen_3_3250uMatch-

Node

amd ryzen_3_3300u_firmwareMatch-

AND

amd ryzen_3_3300uMatch-

Node

amd ryzen_3_3350u_firmwareMatch-

AND

amd ryzen_3_3350uMatch-

Node

amd ryzen_3_3450u_firmwareMatch-

AND

amd ryzen_3_3450uMatch-

Node

amd ryzen_3_3500u_firmwareMatch-

AND

amd ryzen_3_3500uMatch-

Node

amd ryzen_3_3500c_firmwareMatch-

AND

amd ryzen_3_3500cMatch-

Node

amd ryzen_3_3550h_firmwareMatch-

AND

amd ryzen_3_3550hMatch-

Node

amd ryzen_3_3580u_firmwareMatch-

AND

amd ryzen_3_3580uMatch-

Node

amd ryzen_3_3700u_firmwareMatch-

AND

amd ryzen_3_3700uMatch-

Node

amd ryzen_3_3700c_firmwareMatch-

AND

amd ryzen_3_3700cMatch-

Node

amd ryzen_3_3750h_firmwareMatch-

AND

amd ryzen_3_3750hMatch-

Node

amd ryzen_3_3780u_firmwareMatch-

AND

amd ryzen_3_3780uMatch-

Node

amd ryzen_3_2200u_firmwareRange<comboam4v2_pi_1.2.0.6c

AND

amd ryzen_3_2200uMatch-

Node

amd ryzen_3_2300u_firmwareRange<comboam4v2_pi_1.2.0.6c

AND

amd ryzen_3_2300uMatch-

Node

amd ryzen_5_2500u_firmwareRange<comboam4v2_pi_1.2.0.6c

AND

amd ryzen_5_2500uMatch-

Node

amd ryzen_5_2600_firmwareRange<comboam4v2_pi_1.2.0.6c

AND

amd ryzen_5_2600Match-

Node

amd ryzen_5_2600h_firmwareRange<comboam4v2_pi_1.2.0.6c

AND

amd ryzen_5_2600hMatch-

Node

amd ryzen_5_2600x_firmwareRange<comboam4v2_pi_1.2.0.6c

AND

amd ryzen_5_2600xMatch-

Node

amd ryzen_5_2700_firmwareRange<comboam4v2_pi_1.2.0.6c

AND

amd ryzen_5_2700Match-

Node

amd ryzen_5_2700x_firmwareRange<comboam4v2_pi_1.2.0.6c

AND

amd ryzen_5_2700xMatch-

Node

amd ryzen_7_2700_firmwareRange<comboam4v2_pi_1.2.0.6c

AND

amd ryzen_7_2700Match-

Node

amd ryzen_7_2700u_firmwareRange<comboam4v2_pi_1.2.0.6c

AND

amd ryzen_7_2700uMatch-

Node

amd ryzen_7_2700x_firmwareRange<comboam4v2_pi_1.2.0.6c

AND

amd ryzen_7_2700xMatch-

Node

amd ryzen_7_2800h_firmwareRange<comboam4v2_pi_1.2.0.6c

AND

amd ryzen_7_2800hMatch-

Node

amd ryzen_3_3300x_firmwareRange<comboam4_v2_pi_1.2.0.6c

AND

amd ryzen_3_3300xMatch-

Node

amd ryzen_5_3500_firmwareRange<comboam4_v2_pi_1.2.0.6c

AND

amd ryzen_5_3500Match-

Node

amd ryzen_5_3500x_firmwareRange<comboam4_v2_pi_1.2.0.6c

AND

amd ryzen_5_3500xMatch-

Node

amd ryzen_5_3600_firmwareRange<comboam4_v2_pi_1.2.0.6c

AND

amd ryzen_5_3600Match-

Node

amd ryzen_5_3600x_firmwareRange<comboam4_v2_pi_1.2.0.6c

AND

amd ryzen_5_3600xMatch-

Node

amd ryzen_5_3600xt_firmwareRange<comboam4_v2_pi_1.2.0.6c

AND

amd ryzen_5_3600xtMatch-

Node

amd ryzen_7_3700x_firmwareRange<comboam4_v2_pi_1.2.0.6c

AND

amd ryzen_7_3700xMatch-

Node

amd ryzen_7_3800x_firmwareRange<comboam4_v2_pi_1.2.0.6c

AND

amd ryzen_7_3800xMatch-

Node

amd ryzen_7_3800xt_firmwareRange<comboam4_v2_pi_1.2.0.6c

AND

amd ryzen_7_3800xtMatch-

Node

amd ryzen_9_3900_firmwareRange<comboam4_v2_pi_1.2.0.6c

AND

amd ryzen_9_3900Match-

Node

amd ryzen_9_3900x_firmwareRange<comboam4_v2_pi_1.2.0.6c

AND

amd ryzen_9_3900xMatch-

Node

amd ryzen_9_3900xt_firmwareRange<comboam4_v2_pi_1.2.0.6c

AND

amd ryzen_9_3900xtMatch-

Node

amd ryzen_9_3950x_firmwareRange<comboam4_v2_pi_1.2.0.6c

AND

amd ryzen_9_3950xMatch-

Node

amd ryzen_9_pro_3900_firmwareRange<comboam4_v2_pi_1.2.0.6c

AND

amd ryzen_9_pro_3900Match-

Node

amd ryzen_threadripper_2990wx_firmwareRange<summitpi-sp3r2_1.1.0.5

AND

amd ryzen_threadripper_2990wxMatch-

Node

amd ryzen_threadripper_2970wx_firmwareRange<summitpi-sp3r2_1.1.0.5

AND

amd ryzen_threadripper_2970wxMatch-

Node

amd ryzen_threadripper_2950x_firmwareRange<summitpi-sp3r2_1.1.0.5

AND

amd ryzen_threadripper_2950xMatch-

Node

amd ryzen_threadripper_2920x_firmwareRange<summitpi-sp3r2_1.1.0.5

AND

amd ryzen_threadripper_2920xMatch-

Node

amd ryzen_threadripper_3990x_firmwareRange<castlepeakpi-sp3r3_1.0.0.6

AND

amd ryzen_threadripper_3990xMatch-

Node

amd ryzen_threadripper_3970x_firmwareRange<castlepeakpi-sp3r3_1.0.0.6

AND

amd ryzen_threadripper_3970xMatch-

Node

amd ryzen_threadripper_3960x_firmwareRange<castlepeakpi-sp3r3_1.0.0.6

AND

amd ryzen_threadripper_3960xMatch-

Node

amd ryzen_threadripper_pro_3795wx_firmwareRange<castlepeakwspi-swrx8_1.0.0.9

AND

amd ryzen_threadripper_pro_3795wxMatch-

Node

amd ryzen_threadripper_pro_3945wx_firmwareRange<castlepeakwspi-swrx8_1.0.0.9

AND

amd ryzen_threadripper_pro_3945wxMatch-

Node

amd ryzen_threadripper_pro_3955wx_firmwareRange<castlepeakwspi-swrx8_1.0.0.9

AND

amd ryzen_threadripper_pro_3955wxMatch-

Node

amd ryzen_threadripper_pro_3975wx_firmwareRange<castlepeakwspi-swrx8_1.0.0.9

AND

amd ryzen_threadripper_pro_3975wxMatch-

Node

amd ryzen_threadripper_pro_3995wx_firmwareRange<castlepeakwspi-swrx8_1.0.0.9

AND

amd ryzen_threadripper_pro_3995wxMatch-

Node

amd ryzen_threadripper_pro_5945wx_firmwareRange<castlepeakwspi-swrx8_1.0.0.9

AND

amd ryzen_threadripper_pro_5945wxMatch-

Node

amd ryzen_threadripper_pro_5955wx_firmwareRange<castlepeakwspi-swrx8_1.0.0.9

AND

amd ryzen_threadripper_pro_5955wxMatch-

Node

amd ryzen_threadripper_pro_5965wx_firmwareRange<castlepeakwspi-swrx8_1.0.0.9

AND

amd ryzen_threadripper_pro_5965wxMatch-

Node

amd ryzen_threadripper_pro_5975wx_firmwareRange<castlepeakwspi-swrx8_1.0.0.9

AND

amd ryzen_threadripper_pro_5975wxMatch-

Node

amd ryzen_threadripper_pro_5995wx_firmwareRange<castlepeakwspi-swrx8_1.0.0.9

AND

amd ryzen_threadripper_pro_5995wxMatch-

Node

amd ryzen_7_4700g_firmwareRange<renoirpi-fp6_1.0.0.7

AND

amd ryzen_7_4700gMatch-

Node

amd ryzen_7_4700ge_firmwareRange<renoirpi-fp6_1.0.0.7

AND

amd ryzen_7_4700geMatch-

Node

amd ryzen_5_4600g_firmwareRange<renoirpi-fp6_1.0.0.7

AND

amd ryzen_5_4600gMatch-

Node

amd ryzen_5_4600ge_firmwareRange<renoirpi-fp6_1.0.0.7

AND

amd ryzen_5_4600geMatch-

Node

amd ryzen_3_4300g_firmwareRange<renoirpi-fp6_1.0.0.7

AND

amd ryzen_3_4300gMatch-

Node

amd ryzen_3_4300ge_firmwareRange<renoirpi-fp6_1.0.0.7

AND

amd ryzen_3_4300geMatch-

[
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "x86"
    ],
    "product": "Ryzen™ 2000 Series ",
    "vendor": " AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various "
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "x86"
    ],
    "product": "Ryzen™ 3000 Series",
    "vendor": " AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various "
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "x86"
    ],
    "product": "Ryzen™ 4000 Series",
    "vendor": " AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various "
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "x86"
    ],
    "product": "Ryzen™ 5000 Series",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various "
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "x86"
    ],
    "product": "2nd Gen AMD Ryzen™ Threadripper™ Processor",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "Various "
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "x86"
    ],
    "product": "3rd Gen AMD Ryzen™ Threadripper™ Processors",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various "
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "x86"
    ],
    "product": " Ryzen™ Threadripper™ PRO Processor",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various"
      }
    ]
  }
]

Source	Link
amd	www.amd.com/en/resources/product-security/bulletin/amd-sb-1027.html

20 Feb 2025 20:15Current

8.6High risk

Vulners AI Score8.6

CVSS 3.18.8

EPSS0.00393

SSVC

CWE-670