Input validation

2023-11-1419:15:00

PRIOn knowledge base

www.prio-n.com

input validation

smm supervisor

compromised smi handler

ring0 access

arbitrary code execution

nvd

8 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

49.0%

JSON

Improper input validation in the SMM Supervisor may allow an attacker with a compromised SMI handler to gain Ring0 access potentially leading to arbitrary code execution.

CPENameOperatorVersion
ryzen_3_5125c_firmwareeq< cezannepifp61.0.0.fa
ryzen_3_5300g_firmwareeq< comboam4v2-1.2.0.b
ryzen_3_5300ge_firmwareeq< comboam4v2-1.2.0.b
ryzen_3_5400u_firmwareeq< cezannepifp61.0.0.fa
ryzen_3_5425u_firmwareeq< cezannepifp61.0.0.fa
ryzen_3_7335u_firmwareeq< rembrandtpifp71.0.0.9b
ryzen_3_7440u_firmwareeq< phoenixpifp8fp71.0.0.2
ryzen_5_5500h_firmwareeq< cezannepifp61.0.0.fa
ryzen_5_5560u_firmwareeq< cezannepifp61.0.0.fa
ryzen_5_5600g_firmwareeq< comboam4v2-1.2.0.b

Name	Operator	Version
ryzen_3_5125c_firmware	eq	< cezannepifp61.0.0.fa
ryzen_3_5300g_firmware	eq	< comboam4v2-1.2.0.b
ryzen_3_5300ge_firmware	eq	< comboam4v2-1.2.0.b
ryzen_3_5400u_firmware	eq	< cezannepifp61.0.0.fa
ryzen_3_5425u_firmware	eq	< cezannepifp61.0.0.fa
ryzen_3_7335u_firmware	eq	< rembrandtpifp71.0.0.9b
ryzen_3_7440u_firmware	eq	< phoenixpifp8fp71.0.0.2
ryzen_5_5500h_firmware	eq	< cezannepifp61.0.0.fa
ryzen_5_5560u_firmware	eq	< cezannepifp61.0.0.fa
ryzen_5_5600g_firmware	eq	< comboam4v2-1.2.0.b