3 matches found
CVE-2023-20571
CVE-2023-20571 describes a race condition in AMD System Management Mode (SMM) code that, if exploited by a compromised user-space process, could facilitate privilege escalation by leveraging CVE-2018-8897. The connected AMD advisories confirm this issue under AMD SB-5001/AMD SB-4002 families with...
CVE-2023-20563
CVE-2023-20563 is a documented AMD/PI firmware vulnerability affecting System Management Mode (SMM) with local privilege escalation potential. The Connected AMD bulletin entries (AMD-SB-5001 and AMD-SB-4002) describe multiple affected AMD embedded platforms and indicate mitigations via Platform I...
CVE-2023-20565
CVE-2023-20565 is documented in AMD’s embedded/PI firmware advisories (AMD-SB-5001 and related) as a high-severity issue where insufficient protections in System Management Mode (SMM) could allow privilege escalation via local access. The connected AMD bulletin provides mitigations via Platform I...