Design/Logic Flaw

2023-04-0221:15:00

PRIOn knowledge base

www.prio-n.com

design flaw

logic flaw

control flow management

privileged attacker

smm handler

escalation of privileges

nvd

8.6 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.1%

JSON

Insufficient control flow management in AmdCpmGpioInitSmm may allow a privileged attacker to tamper with the SMM handler potentially leading to escalation of privileges.

CPENameOperatorVersion
ryzen_3_2200u_firmwareeq< comboam4v2pi1.2.0.6c
ryzen_3_2300u_firmwareeq< comboam4v2pi1.2.0.6c
ryzen_3_3300x_firmwareeq< comboam4v2pi1.2.0.6c
ryzen_3_4300g_firmwareeq< renoirpifp61.0.0.7
ryzen_3_4300ge_firmwareeq< renoirpifp61.0.0.7
ryzen_3_5125c_firmwareeq< cezannepifp61.0.0.9
ryzen_3_5300g_firmwareeq< comboam4v2pi1.2.0.6c
ryzen_3_5300ge_firmwareeq< comboam4v2pi1.2.0.6c
ryzen_3_5400u_firmwareeq< cezannepifp61.0.0.9
ryzen_3_5425c_firmwareeq< cezannepifp61.0.0.9

Name	Operator	Version
ryzen_3_2200u_firmware	eq	< comboam4v2pi1.2.0.6c
ryzen_3_2300u_firmware	eq	< comboam4v2pi1.2.0.6c
ryzen_3_3300x_firmware	eq	< comboam4v2pi1.2.0.6c
ryzen_3_4300g_firmware	eq	< renoirpifp61.0.0.7
ryzen_3_4300ge_firmware	eq	< renoirpifp61.0.0.7
ryzen_3_5125c_firmware	eq	< cezannepifp61.0.0.9
ryzen_3_5300g_firmware	eq	< comboam4v2pi1.2.0.6c
ryzen_3_5300ge_firmware	eq	< comboam4v2pi1.2.0.6c
ryzen_3_5400u_firmware	eq	< cezannepifp61.0.0.9
ryzen_3_5425c_firmware	eq	< cezannepifp61.0.0.9