Lucene search

K
nvd[email protected]NVD:CVE-2022-23820
HistoryNov 14, 2023 - 7:15 p.m.

CVE-2022-23820

2023-11-1419:15:10
CWE-20
web.nvd.nist.gov
5
amd
smm communication
smram
code execution

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.004

Percentile

73.0%

Failure to validate the AMD SMM communication buffer
may allow an attacker to corrupt the SMRAM potentially leading to arbitrary
code execution.

Affected configurations

Nvd
Node
amdryzen_9_3900_firmwareMatchcomboam4_pi_1.0.0.9
OR
amdryzen_9_3900_firmwareMatchcomboam4_v2_pi_1.2.0.8
AND
amdryzen_9_3900Match-
Node
amdryzen_9_3900x_firmwareMatchcomboam4_pi_1.0.0.9
OR
amdryzen_9_3900x_firmwareMatchcomboam4_v2_pi_1.2.0.8
AND
amdryzen_9_3900xMatch-
Node
amdryzen_9_3900xt_firmwareMatchcomboam4_pi_1.0.0.9
OR
amdryzen_9_3900xt_firmwareMatchcomboam4_v2_pi_1.2.0.8
AND
amdryzen_9_3900xtMatch-
Node
amdryzen_9_3950x_firmwareMatchcomboam4_pi_1.0.0.9
OR
amdryzen_9_3950x_firmwareMatchcomboam4_v2_pi_1.2.0.8
AND
amdryzen_9_3950xMatch-
Node
amdryzen_7_3700x_firmwareMatchcomboam4_pi_1.0.0.9
OR
amdryzen_7_3700x_firmwareMatchcomboam4_v2_pi_1.2.0.8
AND
amdryzen_7_3700xMatch-
Node
amdryzen_7_3800x_firmwareMatchcomboam4_pi_1.0.0.9
OR
amdryzen_7_3800x_firmwareMatchcomboam4_v2_pi_1.2.0.8
AND
amdryzen_7_3800xMatch-
Node
amdryzen_7_3800xt_firmwareMatchcomboam4_pi_1.0.0.9
OR
amdryzen_7_3800xt_firmwareMatchcomboam4_v2_pi_1.2.0.8
AND
amdryzen_7_3800xtMatch-
Node
amdryzen_5_3500_firmwareMatchcomboam4_pi_1.0.0.9
OR
amdryzen_5_3500_firmwareMatchcomboam4_v2_pi_1.2.0.8
AND
amdryzen_5_3500Match-
Node
amdryzen_5_3500x_firmwareMatchcomboam4_pi_1.0.0.9
OR
amdryzen_5_3500x_firmwareMatchcomboam4_v2_pi_1.2.0.8
AND
amdryzen_5_3500xMatch-
Node
amdryzen_5_3600_firmwareMatchcomboam4_pi_1.0.0.9
OR
amdryzen_5_3600_firmwareMatchcomboam4_v2_pi_1.2.0.8
AND
amdryzen_5_3600Match-
Node
amdryzen_5_3600x_firmwareMatchcomboam4_pi_1.0.0.9
OR
amdryzen_5_3600x_firmwareMatchcomboam4_v2_pi_1.2.0.8
AND
amdryzen_5_3600xMatch-
Node
amdryzen_5_3600xt_firmwareMatchcomboam4_pi_1.0.0.9
OR
amdryzen_5_3600xt_firmwareMatchcomboam4_v2_pi_1.2.0.8
AND
amdryzen_5_3600xtMatch-
Node
amdryzen_3_3100_firmwareMatchcomboam4_pi_1.0.0.9
OR
amdryzen_3_3100_firmwareMatchcomboam4_v2_pi_1.2.0.8
AND
amdryzen_3_3100Match-
Node
amdryzen_3_3300x_firmwareMatchcomboam4_pi_1.0.0.9
OR
amdryzen_3_3300x_firmwareMatchcomboam4_v2_pi_1.2.0.8
AND
amdryzen_3_3300xMatch-
Node
amdryzen_9_5900_firmwareMatchcomboam4_v2_pi_1.2.0.8
AND
amdryzen_9_5900Match-
Node
amdryzen_9_5900x_firmwareMatchcomboam4_v2_pi_1.2.0.8
AND
amdryzen_9_5900xMatch-
Node
amdryzen_9_5950x_firmwareMatchcomboam4_v2_pi_1.2.0.8
AND
amdryzen_9_5950xMatch-
Node
amdryzen_9_pro_5945_firmwareMatchcomboam4_v2_pi_1.2.0.8
AND
amdryzen_9_pro_5945Match-
Node
amdryzen_7_pro_5845_firmwareMatchcomboam4_v2_pi_1.2.0.8
AND
amdryzen_7_pro_5845Match-
Node
amdryzen_7_5800_firmwareMatchcomboam4_v2_pi_1.2.0.8
AND
amdryzen_7_5800Match-
Node
amdryzen_7_5800x_firmwareMatchcomboam4_v2_pi_1.2.0.8
AND
amdryzen_7_5800xMatch-
Node
amdryzen_7_5700x_firmwareMatchcomboam4_v2_pi_1.2.0.8
AND
amdryzen_7_5700xMatch-
Node
amdryzen_5_5600_firmwareMatchcomboam4_v2_pi_1.2.0.8
AND
amdryzen_5_5600Match-
Node
amdryzen_5_5600x_firmwareMatchcomboam4_v2_pi_1.2.0.8
AND
amdryzen_5_5600xMatch-
Node
amdryzen_5_56003xd_firmwareMatchcomboam4_v2_pi_1.2.0.8
AND
amdryzen_5_56003xdMatch-
Node
amdryzen_5_pro_5645_firmwareMatchcomboam4_v2_pi_1.2.0.8
AND
amdryzen_5_pro_5645Match-
Node
amdryzen_5_5500_firmwareMatchcomboam4v2_pi_1.2.0.8
AND
amdryzen_5_5600Match-
Node
amdryzen_5_5500x_firmwareMatchcomboam4v2_pi_1.2.0.8
AND
amdryzen_5_5600xMatch-
Node
amdryzen_5_55003xd_firmwareMatchcomboam4v2_pi_1.2.0.8
AND
amdryzen_5_56003xdMatch-
Node
amdryzen_7_5700_firmwareMatchcomboam4v2_pi_1.2.0.8
AND
amdryzen_7_5700Match-
Node
amdryzen_5_5500_firmwareMatchcomboam4v2_pi_1.2.0.8
AND
amdryzen_5_5500Match-
Node
amdryzen_3_5100_firmwareMatchcomboam4v2_pi_1.2.0.8
AND
amdryzen_3_5100Match-
Node
amdryzen_5_pro_3400g_firmwareMatchcomboam4_pi_1.0.0.9
OR
amdryzen_5_pro_3400g_firmwareMatchcomboam4_v2_pi_1.2.0.8
AND
amdryzen_5_pro_3400gMatch-
Node
amdryzen_5_pro_3400ge_firmwareMatchcomboam4_pi_1.0.0.9
OR
amdryzen_5_pro_3400ge_firmwareMatchcomboam4_v2_pi_1.2.0.8
AND
amdryzen_5_pro_3400geMatch-
Node
amdryzen_5_pro_3350g_firmwareMatchcomboam4_pi_1.0.0.9
OR
amdryzen_5_pro_3350g_firmwareMatchcomboam4_v2_pi_1.2.0.8
AND
amdryzen_5_pro_3350gMatch-
Node
amdryzen_5_pro_3350ge_firmwareMatchcomboam4_pi_1.0.0.9
OR
amdryzen_5_pro_3350ge_firmwareMatchcomboam4_v2_pi_1.2.0.8
AND
amdryzen_5_pro_3350geMatch-
Node
amdryzen_threadripper_2990wx_firmwareMatchsummitpi-sp3r2_1.1.0.6
AND
amdryzen_threadripper_2990wxMatch-
Node
amdryzen_threadripper_2970wx_firmwareMatchsummitpi-sp3r2_1.1.0.6
AND
amdryzen_threadripper_2970wxMatch-
Node
amdryzen_threadripper_2950x_firmwareMatchsummitpi-sp3r2_1.1.0.6
AND
amdryzen_threadripper_2950xMatch-
Node
amdryzen_threadripper_2920x_firmwareMatchsummitpi-sp3r2_1.1.0.6
AND
amdryzen_threadripper_2920xMatch-
Node
amdryzen_threadripper_pro_3995wx_firmwareMatchcastlepeakpi-sp3r2_1.1.0.8
AND
amdryzen_threadripper_pro_3995wxMatch-
Node
amdryzen_threadripper_pro_3975wx_firmwareMatchcastlepeakpi-sp3r2_1.1.0.8
AND
amdryzen_threadripper_pro_3975wxMatch-
Node
amdryzen_threadripper_pro_3955wx_firmwareMatchcastlepeakpi-sp3r2_1.1.0.8
AND
amdryzen_threadripper_pro_3955wxMatch-
Node
amdryzen_threadripper_pro_3945wx_firmwareMatchcastlepeakpi-sp3r2_1.1.0.8
AND
amdryzen_threadripper_pro_3945wxMatch-
Node
amdryzen_threadripper_3990x_firmwareMatchcastlepeakpi-sp3r2_1.1.0.8
AND
amdryzen_threadripper_3990xMatch-
Node
amdryzen_threadripper_3970x_firmwareMatchcastlepeakpi-sp3r2_1.1.0.8
AND
amdryzen_threadripper_3970xMatch-
Node
amdryzen_threadripper_3960x_firmwareMatchcastlepeakpi-sp3r2_1.1.0.8
AND
amdryzen_threadripper_3960xMatch-
Node
amdathlon_3015e_firmwareMatchpollockpi-ft5_1.0.0.5
AND
amdathlon_3015eMatch-
Node
amdathlon_3015ce_firmwareMatchpollockpi-ft5_1.0.0.5
AND
amdathlon_3015ceMatch-
Node
amdryzen_7_3780u_firmwareMatchpicassopi-fp5_1.0.0.e
AND
amdryzen_7_3780uMatch-
Node
amdryzen_7_3750h_firmwareMatchpicassopi-fp5_1.0.0.e
AND
amdryzen_7_3750hMatch-
Node
amdryzen_7_3700c_firmwareMatchpicassopi-fp5_1.0.0.e
AND
amdryzen_7_3700cMatch-
Node
amdryzen_7_3700u_firmwareMatchpicassopi-fp5_1.0.0.e
AND
amdryzen_7_3700uMatch-
Node
amdryzen_5_3580u_firmwareMatchpicassopi-fp5_1.0.0.e
AND
amdryzen_5_3580uMatch-
Node
amdryzen_5_3550h_firmwareMatchpicassopi-fp5_1.0.0.e
AND
amdryzen_5_3550hMatch-
Node
amdryzen_5_3500c_firmwareMatchpicassopi-fp5_1.0.0.e
AND
amdryzen_5_3500cMatch-
Node
amdryzen_5_3500u_firmwareMatchpicassopi-fp5_1.0.0.e
AND
amdryzen_5_3500uMatch-
Node
amdryzen_5_3450u_firmwareMatchpicassopi-fp5_1.0.0.e
AND
amdryzen_5_3450uMatch-
Node
amdryzen_3_3350u_firmwareMatchpicassopi-fp5_1.0.0.e
AND
amdryzen_3_3350uMatch-
Node
amdryzen_3_3300u_firmwareMatchpicassopi-fp5_1.0.0.e
AND
amdryzen_3_3300uMatch-
Node
amdryzen_9_4900h_firmwareMatchrenoirpi-fp6_1.0.0.9
AND
amdryzen_9_4900hMatch-
Node
amdryzen_9_4900hs_firmwareMatchrenoirpi-fp6_1.0.0.9
AND
amdryzen_9_4900hsMatch-
Node
amdryzen_7_4800hs_firmwareMatchrenoirpi-fp6_1.0.0.9
AND
amdryzen_7_4800hsMatch-
Node
amdryzen_7_4800h_firmwareMatchrenoirpi-fp6_1.0.0.9
AND
amdryzen_7_4800hMatch-
Node
amdryzen_7_4800u_firmwareMatchrenoirpi-fp6_1.0.0.9
AND
amdryzen_7_4800uMatch-
Node
amdryzen_7_4700u_firmwareMatchrenoirpi-fp6_1.0.0.9
AND
amdryzen_7_4700uMatch-
Node
amdryzen_7_4980u_firmwareMatchrenoirpi-fp6_1.0.0.9
AND
amdryzen_7_4980uMatch-
Node
amdryzen_5_4600h_firmwareMatchrenoirpi-fp6_1.0.0.9
AND
amdryzen_5_4600hMatch-
Node
amdryzen_5_4600hs_firmwareMatchrenoirpi-fp6_1.0.0.9
AND
amdryzen_5_4600hsMatch-
Node
amdryzen_5_4500u_firmwareMatchrenoirpi-fp6_1.0.0.9
AND
amdryzen_5_4500uMatch-
Node
amdryzen_5_4600u_firmwareMatchrenoirpi-fp6_1.0.0.9
AND
amdryzen_5_4600uMatch-
Node
amdryzen_5_4680u_firmwareMatchrenoirpi-fp6_1.0.0.9
AND
amdryzen_5_4680uMatch-
Node
amdryzen_3_4300u_firmwareMatchrenoirpi-fp6_1.0.0.9
AND
amdryzen_3_4300uMatch-
Node
amdryzen_9_5900hs_firmwareMatchcezannepi-fp6_1.0.0.b
AND
amdryzen_9_5900hsMatch-
Node
amdryzen_9_5900hx_firmwareMatchcezannepi-fp6_1.0.0.b
AND
amdryzen_9_5900hxMatch-
Node
amdryzen_9_5980hx_firmwareMatchcezannepi-fp6_1.0.0.b
AND
amdryzen_9_5980hxMatch-
Node
amdryzen_9_5980hs_firmwareMatchcezannepi-fp6_1.0.0.b
AND
amdryzen_9_5980hsMatch-
Node
amdryzen_7_5800h_firmwareMatchcezannepi-fp6_1.0.0.b
AND
amdryzen_7_5800hMatch-
Node
amdryzen_7_5800hs_firmwareMatchcezannepi-fp6_1.0.0.b
AND
amdryzen_7_5800hsMatch-
Node
amdryzen_7_5825u_firmwareMatchcezannepi-fp6_1.0.0.b
AND
amdryzen_7_5825uMatch-
Node
amdryzen_7_5800u_firmwareMatchcezannepi-fp6_1.0.0.b
AND
amdryzen_7_5800uMatch-
Node
amdryzen_5_5600h_firmwareMatchcezannepi-fp6_1.0.0.b
AND
amdryzen_5_5600hMatch-
Node
amdryzen_5_5600hs_firmwareMatchcezannepi-fp6_1.0.0.b
AND
amdryzen_5_5600hsMatch-
Node
amdryzen_5_5625u_firmwareMatchcezannepi-fp6_1.0.0.b
AND
amdryzen_5_5625uMatch-
Node
amdryzen_5_5600u_firmwareMatchcezannepi-fp6_1.0.0.b
AND
amdryzen_5_5600uMatch-
Node
amdryzen_5_5560u_firmwareMatchcezannepi-fp6_1.0.0.b
AND
amdryzen_5_5560uMatch-
Node
amdryzen_5_5500h_firmwareMatchcezannepi-fp6_1.0.0.b
AND
amdryzen_5_5500hMatch-
Node
amdryzen_3_5425u_firmwareMatchcezannepi-fp6_1.0.0.b
AND
amdryzen_3_5425uMatch-
Node
amdryzen_3_5400u_firmwareMatchcezannepi-fp6_1.0.0.b
AND
amdryzen_3_5400uMatch-
Node
amdryzen_3_5125c_firmwareMatchcezannepi-fp6_1.0.0.b
AND
amdryzen_3_5125cMatch-
Node
amdryzen_9_6900hs_firmwareMatchrembrandtpi-fp7_1.0.0.2
AND
amdryzen_9_6900hsMatch-
Node
amdryzen_9_6900hx_firmwareMatchrembrandtpi-fp7_1.0.0.2
AND
amdryzen_9_6900hxMatch-
Node
amdryzen_9_6980hx_firmwareMatchrembrandtpi-fp7_1.0.0.2
AND
amdryzen_9_6980hxMatch-
Node
amdryzen_9_6980hs_firmwareMatchrembrandtpi-fp7_1.0.0.2
AND
amdryzen_9_6980hsMatch-
Node
amdryzen_7_6800h_firmwareMatchrembrandtpi-fp7_1.0.0.2
AND
amdryzen_7_6800hMatch-
Node
amdryzen_7_6800hs_firmwareMatchrembrandtpi-fp7_1.0.0.2
AND
amdryzen_7_6800hsMatch-
Node
amdryzen_7_6800u_firmwareMatchrembrandtpi-fp7_1.0.0.2
AND
amdryzen_7_6800uMatch-
Node
amdryzen_5_6600h_firmwareMatchrembrandtpi-fp7_1.0.0.2
AND
amdryzen_5_6600hMatch-
Node
amdryzen_5_6600hs_firmwareMatchrembrandtpi-fp7_1.0.0.2
AND
amdryzen_5_6600hsMatch-
Node
amdryzen_5_6600u_firmwareMatchrembrandtpi-fp7_1.0.0.2
AND
amdryzen_5_6600uMatch-
Node
amdryzen_3_7335u_firmwareMatchrembrandtpi-fp7_1.0.0.2
AND
amdryzen_3_7335uMatch-
Node
amdryzen_5_7535u_firmwareMatchrembrandtpi-fp7_1.0.0.2
AND
amdryzen_5_7535uMatch-
Node
amdryzen_5_7535hs_firmwareMatchrembrandtpi-fp7_1.0.0.2
AND
amdryzen_5_7535hsMatch-
Node
amdryzen_7_7735u_firmwareMatchrembrandtpi-fp7_1.0.0.2
AND
amdryzen_7_7735uMatch-
Node
amdryzen_7_7736u_firmwareMatchrembrandtpi-fp7_1.0.0.2
AND
amdryzen_7_7736uMatch-
Node
amdryzen_7_7735hs_firmwareMatchrembrandtpi-fp7_1.0.0.2
AND
amdryzen_7_7735hsMatch-
VendorProductVersionCPE
amdryzen_9_3900_firmwarecomboam4_pi_1.0.0.9cpe:2.3:o:amd:ryzen_9_3900_firmware:comboam4_pi_1.0.0.9:*:*:*:*:*:*:*
amdryzen_9_3900_firmwarecomboam4_v2_pi_1.2.0.8cpe:2.3:o:amd:ryzen_9_3900_firmware:comboam4_v2_pi_1.2.0.8:*:*:*:*:*:*:*
amdryzen_9_3900-cpe:2.3:h:amd:ryzen_9_3900:-:*:*:*:*:*:*:*
amdryzen_9_3900x_firmwarecomboam4_pi_1.0.0.9cpe:2.3:o:amd:ryzen_9_3900x_firmware:comboam4_pi_1.0.0.9:*:*:*:*:*:*:*
amdryzen_9_3900x_firmwarecomboam4_v2_pi_1.2.0.8cpe:2.3:o:amd:ryzen_9_3900x_firmware:comboam4_v2_pi_1.2.0.8:*:*:*:*:*:*:*
amdryzen_9_3900x-cpe:2.3:h:amd:ryzen_9_3900x:-:*:*:*:*:*:*:*
amdryzen_9_3900xt_firmwarecomboam4_pi_1.0.0.9cpe:2.3:o:amd:ryzen_9_3900xt_firmware:comboam4_pi_1.0.0.9:*:*:*:*:*:*:*
amdryzen_9_3900xt_firmwarecomboam4_v2_pi_1.2.0.8cpe:2.3:o:amd:ryzen_9_3900xt_firmware:comboam4_v2_pi_1.2.0.8:*:*:*:*:*:*:*
amdryzen_9_3900xt-cpe:2.3:h:amd:ryzen_9_3900xt:-:*:*:*:*:*:*:*
amdryzen_9_3950x_firmwarecomboam4_pi_1.0.0.9cpe:2.3:o:amd:ryzen_9_3950x_firmware:comboam4_pi_1.0.0.9:*:*:*:*:*:*:*
Rows per page:
1-10 of 2261

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.004

Percentile

73.0%

Related for NVD:CVE-2022-23820