Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-20555


Insufficient input validation in CpmDisplayFeatureSmm may allow an attacker to corrupt SMM memory by overwriting an arbitrary bit in an attacker-controlled pointer potentially leading to arbitrary code execution in SMM.


Security Impact Summary

This vulnerability carries a HIGH severity rating with a CVSS v3.1 score of 7.8, requiring local system access to exploit with relatively low complexity without requiring user interaction requiring only low-level privileges . The vulnerability impacts confidentiality (data exposure), integrity (unauthorized modifications), and availability (service disruption) for affected systems. Impacting 238 products from amd, from amd, from amd and 235 others, organizations running these solutions should prioritize assessment and patching.

Historical Context

Reported in 2023, this vulnerability emerged during an era marked by increased sophistication in supply chain attacks, cloud infrastructure vulnerabilities, and software-as-a-service (SaaS) security challenges. Security practices during this period emphasized zero-trust architectures, container security, and API protection.


Published

2023-08-08T18:15:11.173

Last Modified

2024-11-21T07:41:06.360

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.8 (HIGH)

Weaknesses
  • Type: Primary
    CWE-787

Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System amd ryzen_3_3300_firmware < comboam4_pi_v1_1.0.0.a Yes
Hardware amd ryzen_3_3300 - No
Operating System amd ryzen_3_3300x_firmware < comboam4_pi_v1_1.0.0.a Yes
Hardware amd ryzen_3_3300x - No
Operating System amd ryzen_5_3600_firmware < comboam4_pi_v1_1.0.0.a Yes
Hardware amd ryzen_5_3600 - No
Operating System amd ryzen_5_3600x_firmware < comboam4_pi_v1_1.0.0.a Yes
Hardware amd ryzen_5_3600x - No
Operating System amd ryzen_7_3700_firmware < comboam4_pi_v1_1.0.0.a Yes
Hardware amd ryzen_7_3700 - No
Operating System amd ryzen_7_3700x_firmware < comboam4_pi_v1_1.0.0.a Yes
Hardware amd ryzen_7_3700x - No
Operating System amd ryzen_9_3800x_firmware < comboam4_pi_v1_1.0.0.a Yes
Hardware amd ryzen_9_3800x - No
Operating System amd ryzen_9_3850x_firmware < comboam4_pi_v1_1.0.0.a Yes
Hardware amd ryzen_9_3850x - No
Operating System amd ryzen_3_3300_firmware < comboam4v2_pi_1.2.0.a Yes
Hardware amd ryzen_3_3300 - No
Operating System amd ryzen_3_3300x_firmware < comboam4v2_pi_1.2.0.a Yes
Hardware amd ryzen_3_3300x - No
Operating System amd ryzen_5_3600_firmware < comboam4v2_pi_1.2.0.a Yes
Hardware amd ryzen_5_3600 - No
Operating System amd ryzen_5_3600x_firmware < comboam4v2_pi_1.2.0.a Yes
Hardware amd ryzen_5_3600x - No
Operating System amd ryzen_7_3700_firmware < comboam4v2_pi_1.2.0.a Yes
Hardware amd ryzen_7_3700 - No
Operating System amd ryzen_7_3700x_firmware < comboam4v2_pi_1.2.0.a Yes
Hardware amd ryzen_7_3700x - No
Operating System amd ryzen_9_3800x_firmware < comboam4v2_pi_1.2.0.a Yes
Hardware amd ryzen_9_3800x - No
Operating System amd ryzen_9_3850x_firmware < comboam4v2_pi_1.2.0.a Yes
Hardware amd ryzen_9_3850x - No
Operating System amd ryzen_9_5950x_firmware < comboam4_v2_pi_1.2.0.a Yes
Hardware amd ryzen_9_5950x - No
Operating System amd ryzen_9_5900x_firmware < comboam4_v2_pi_1.2.0.a Yes
Hardware amd ryzen_9_5900x - No
Operating System amd ryzen_9_5900_firmware < comboam4_v2_pi_1.2.0.a Yes
Hardware amd ryzen_9_5900 - No
Operating System amd ryzen_9_pro_5945_firmware < comboam4_v2_pi_1.2.0.a Yes
Hardware amd ryzen_9_pro_5945 - No
Operating System amd ryzen_7_5800x3d_firmware < comboam4_v2_pi_1.2.0.a Yes
Hardware amd ryzen_7_5800x3d - No
Operating System amd ryzen_7_5800x_firmware < comboam4_v2_pi_1.2.0.a Yes
Hardware amd ryzen_7_5800x - No
Operating System amd ryzen_7_5800_firmware < comboam4_v2_pi_1.2.0.a Yes
Hardware amd ryzen_7_5800 - No
Operating System amd ryzen_7_5700x_firmware < comboam4_v2_pi_1.2.0.a Yes
Hardware amd ryzen_7_5700x - No
Operating System amd ryzen_7_pro_5845_firmware < comboam4_v2_pi_1.2.0.a Yes
Hardware amd ryzen_7_pro_5845 - No
Operating System amd ryzen_5_5600x3d_firmware < comboam4_v2_pi_1.2.0.a Yes
Hardware amd ryzen_5_5600x3d - No
Operating System amd ryzen_5_5600x_firmware < comboam4_v2_pi_1.2.0.a Yes
Hardware amd ryzen_5_5600x - No
Operating System amd ryzen_5_5600_firmware < comboam4_v2_pi_1.2.0.a Yes
Hardware amd ryzen_5_5600 - No
Operating System amd ryzen_5_pro_5645_firmware < comboam4_v2_pi_1.2.0.a Yes
Hardware amd ryzen_5_pro_5645 - No
Operating System amd ryzen_7_5700_firmware < comboam4v2_pi_1.2.0.a Yes
Hardware amd ryzen_7_5700 - No
Operating System amd ryzen_5_5500_firmware < comboam4v2_pi_1.2.0.a Yes
Hardware amd ryzen_5_5500 - No
Operating System amd ryzen_3_5100_firmware < comboam4v2_pi_1.2.0.a Yes
Hardware amd ryzen_3_5100 - No
Operating System amd ryzen_7_5700g_firmware < comboam4v2_pi_1.2.0.a Yes
Hardware amd ryzen_7_5700g - No
Operating System amd ryzen_7_5700ge_firmware < comboam4v2_pi_1.2.0.a Yes
Hardware amd ryzen_7_5700ge - No
Operating System amd ryzen_5_5600g_firmware < comboam4v2_pi_1.2.0.a Yes
Hardware amd ryzen_5_5600g - No
Operating System amd ryzen_5_5600ge_firmware < comboam4v2_pi_1.2.0.a Yes
Hardware amd ryzen_5_5600ge - No
Operating System amd ryzen_3_5300g_firmware < comboam4v2_pi_1.2.0.a Yes
Hardware amd ryzen_3_5300g - No
Operating System amd ryzen_3_5300ge_firmware < comboam4v2_pi_1.2.0.a Yes
Hardware amd ryzen_3_5300ge - No
Operating System amd ryzen_9_7950x3d_firmware < comboam5_1.0.0.6 Yes
Hardware amd ryzen_9_7950x3d - No
Operating System amd ryzen_9_7950x_firmware < comboam5_1.0.0.6 Yes
Hardware amd ryzen_9_7950x - No
Operating System amd ryzen_9_7900x3d_firmware < comboam5_1.0.0.6 Yes
Hardware amd ryzen_9_7900x3d - No
Operating System amd ryzen_9_7900x_firmware < comboam5_1.0.0.6 Yes
Hardware amd ryzen_9_7900x - No
Operating System amd ryzen_9_7900_firmware < comboam5_1.0.0.6 Yes
Hardware amd ryzen_9_7900 - No
Operating System amd ryzen_9_pro_7945_firmware < comboam5_1.0.0.6 Yes
Hardware amd ryzen_9_pro_7945 - No
Operating System amd ryzen_7_7800x3d_firmware < comboam5_1.0.0.6 Yes
Hardware amd ryzen_7_7800x3d - No
Operating System amd ryzen_7_7700x_firmware < comboam5_1.0.0.6 Yes
Hardware amd ryzen_7_7700x - No
Operating System amd ryzen_7_7700_firmware < comboam5_1.0.0.6 Yes
Hardware amd ryzen_7_7700 - No
Operating System amd ryzen_7_pro_7745_firmware < comboam5_1.0.0.6 Yes
Hardware amd ryzen_7_pro_7745 - No
Operating System amd ryzen_5_7600x_firmware < comboam5_1.0.0.6 Yes
Hardware amd ryzen_5_7600x - No
Operating System amd ryzen_5_7600_firmware < comboam5_1.0.0.6 Yes
Hardware amd ryzen_5_7600 - No
Operating System amd ryzen_5_pro_7645_firmware < comboam5_1.0.0.6 Yes
Hardware amd ryzen_5_pro_7645 - No
Operating System amd ryzen_5_7500f_firmware < comboam5_1.0.0.6 Yes
Hardware amd ryzen_5_7500f - No
Operating System amd ryzen_4700s_firmware < comboam4v2_pi_1.2.0.a Yes
Hardware amd ryzen_4700s - No
Operating System amd ryzen_5_4500_firmware < comboam4v2_pi_1.2.0.a Yes
Hardware amd ryzen_5_4500 - No
Operating System amd ryzen_3_4100_firmware < comboam4v2_pi_1.2.0.a Yes
Hardware amd ryzen_3_4100 - No
Operating System amd athlon_pro_300ge_firmware < comboam4piv1_1.0.0.a Yes
Hardware amd athlon_pro_300ge - No
Operating System amd athlon_gold_3150ge_firmware < comboam4piv1_1.0.0.a Yes
Hardware amd athlon_gold_3150ge - No
Operating System amd athlon_gold_pro_3150ge_firmware < comboam4piv1_1.0.0.a Yes
Hardware amd athlon_gold_pro_3150ge - No
Operating System amd athlon_gold_3150g_firmware < comboam4piv1_1.0.0.a Yes
Hardware amd athlon_gold_3150g - No
Operating System amd athlon_gold_pro_3150g_firmware < comboam4piv1_1.0.0.a Yes
Hardware amd athlon_gold_pro_3150g - No
Operating System amd athlon_pro_300ge_firmware < comboam4v2_1.2.0.a Yes
Hardware amd athlon_pro_300ge - No
Operating System amd athlon_gold_3150ge_firmware < comboam4v2_1.2.0.a Yes
Hardware amd athlon_gold_3150ge - No
Operating System amd athlon_gold_pro_3150ge_firmware < comboam4v2_1.2.0.a Yes
Hardware amd athlon_gold_pro_3150ge - No
Operating System amd athlon_gold_3150g_firmware < comboam4v2_1.2.0.a Yes
Hardware amd athlon_gold_3150g - No
Operating System amd athlon_gold_pro_3150g_firmware < comboam4v2_1.2.0.a Yes
Hardware amd athlon_gold_pro_3150g - No
Operating System amd athlon_silver_3050e_firmware < picassopi-fp5_1.0.0.f Yes
Hardware amd athlon_silver_3050e - No
Operating System amd athlon_pro_3045b_firmware < picassopi-fp5_1.0.0.f Yes
Hardware amd athlon_pro_3045b - No
Operating System amd athlon_silver_3050u_firmware < picassopi-fp5_1.0.0.f Yes
Hardware amd athlon_silver_3050u - No
Operating System amd athlon_silver_3050c_firmware < picassopi-fp5_1.0.0.f Yes
Hardware amd athlon_silver_3050c - No
Operating System amd athlon_pro_3145b_firmware < picassopi-fp5_1.0.0.f Yes
Hardware amd athlon_pro_3145b - No
Operating System amd athlon_gold_3150u_firmware < picassopi-fp5_1.0.0.f Yes
Hardware amd athlon_gold_3150u - No
Operating System amd athlon_gold_3150c_firmware < picassopi-fp5_1.0.0.f Yes
Hardware amd athlon_gold_3150c - No
Operating System amd athlon_3015e_firmware < pollockpi-ft5_1.0.0.5 Yes
Hardware amd athlon_3015e - No
Operating System amd athlon_3015ce_firmware < pollockpi-ft5_1.0.0.5 Yes
Hardware amd athlon_3015ce - No
Operating System amd ryzen_7_3780u_firmware < picassopi-fp5_1.0.0.f Yes
Hardware amd ryzen_7_3780u - No
Operating System amd ryzen_7_3750h_firmware < picassopi-fp5_1.0.0.f Yes
Hardware amd ryzen_7_3750h - No
Operating System amd ryzen_7_3700c_firmware < picassopi-fp5_1.0.0.f Yes
Hardware amd ryzen_7_3700c - No
Operating System amd ryzen_7_3700u_firmware < picassopi-fp5_1.0.0.f Yes
Hardware amd ryzen_7_3700u - No
Operating System amd ryzen_5_3580u_firmware < picassopi-fp5_1.0.0.f Yes
Hardware amd ryzen_5_3580u - No
Operating System amd ryzen_5_3550h_firmware < picassopi-fp5_1.0.0.f Yes
Hardware amd ryzen_5_3550h - No
Operating System amd ryzen_5_3500c_firmware < picassopi-fp5_1.0.0.f Yes
Hardware amd ryzen_5_3500c - No
Operating System amd ryzen_5_3500u_firmware < picassopi-fp5_1.0.0.f Yes
Hardware amd ryzen_5_3500u - No
Operating System amd ryzen_5_3450u_firmware < picassopi-fp5_1.0.0.f Yes
Hardware amd ryzen_5_3450u - No
Operating System amd ryzen_3_3350u_firmware < picassopi-fp5_1.0.0.f Yes
Hardware amd ryzen_3_3350u - No
Operating System amd ryzen_3_3300u_firmware < picassopi-fp5_1.0.0.f Yes
Hardware amd ryzen_3_3300u - No
Operating System amd ryzen_9_4900h_firmware < renoirpi-fp6_1.0.0.b Yes
Hardware amd ryzen_9_4900h - No
Operating System amd ryzen_9_4900hs_firmware < renoirpi-fp6_1.0.0.b Yes
Hardware amd ryzen_9_4900hs - No
Operating System amd ryzen_7_4800h_firmware < renoirpi-fp6_1.0.0.b Yes
Hardware amd ryzen_7_4800h - No
Operating System amd ryzen_7_4800hs_firmware < renoirpi-fp6_1.0.0.b Yes
Hardware amd ryzen_7_4800hs - No
Operating System amd ryzen_7_4980u_firmware < renoirpi-fp6_1.0.0.b Yes
Hardware amd ryzen_7_4980u - No
Operating System amd ryzen_7_4800u_firmware < renoirpi-fp6_1.0.0.b Yes
Hardware amd ryzen_7_4800u - No
Operating System amd ryzen_7_4700u_firmware < renoirpi-fp6_1.0.0.b Yes
Hardware amd ryzen_7_4700u - No
Operating System amd ryzen_5_4600h_firmware < renoirpi-fp6_1.0.0.b Yes
Hardware amd ryzen_5_4600h - No
Operating System amd ryzen_5_4600hs_firmware < renoirpi-fp6_1.0.0.b Yes
Hardware amd ryzen_5_4600hs - No
Operating System amd ryzen_5_4680u_firmware < renoirpi-fp6_1.0.0.b Yes
Hardware amd ryzen_5_4680u - No
Operating System amd ryzen_5_4600u_firmware < renoirpi-fp6_1.0.0.b Yes
Hardware amd ryzen_5_4600u - No
Operating System amd ryzen_5_4500u_firmware < renoirpi-fp6_1.0.0.b Yes
Hardware amd ryzen_5_4500u - No
Operating System amd ryzen_3_4300u_firmware < renoirpi-fp6_1.0.0.b Yes
Hardware amd ryzen_3_4300u - No
Operating System amd ryzen_7_5700u_firmware < cezannepi-fp6_1.0.0.e Yes
Hardware amd ryzen_7_5700u - No
Operating System amd ryzen_5_5500u_firmware < cezannepi-fp6_1.0.0.e Yes
Hardware amd ryzen_5_5500u - No
Operating System amd ryzen_3_5300u_firmware < cezannepi-fp6_1.0.0.e Yes
Hardware amd ryzen_3_5300u - No
Operating System amd ryzen_9_5980hx_firmware < cezannepi-fp6_1.0.0.e Yes
Hardware amd ryzen_9_5980hx - No
Operating System amd ryzen_9_5980hs_firmware < cezannepi-fp6_1.0.0.e Yes
Hardware amd ryzen_9_5980hs - No
Operating System amd ryzen_9_5900hx_firmware < cezannepi-fp6_1.0.0.e Yes
Hardware amd ryzen_9_5900hx - No
Operating System amd ryzen_9_5900hs_firmware < cezannepi-fp6_1.0.0.e Yes
Hardware amd ryzen_9_5900hs - No
Operating System amd ryzen_7_5800h_firmware < cezannepi-fp6_1.0.0.e Yes
Hardware amd ryzen_7_5800h - No
Operating System amd ryzen_7_5800hs_firmware < cezannepi-fp6_1.0.0.e Yes
Hardware amd ryzen_7_5800hs - No
Operating System amd ryzen_7_5825u_firmware < cezannepi-fp6_1.0.0.e Yes
Hardware amd ryzen_7_5825u - No
Operating System amd ryzen_7_5800u_firmware < cezannepi-fp6_1.0.0.e Yes
Hardware amd ryzen_7_5800u - No
Operating System amd ryzen_5_5600h_firmware < cezannepi-fp6_1.0.0.e Yes
Hardware amd ryzen_5_5600h - No
Operating System amd ryzen_5_5600hs_firmware < cezannepi-fp6_1.0.0.e Yes
Hardware amd ryzen_5_5600hs - No
Operating System amd ryzen_5_5625u_firmware < cezannepi-fp6_1.0.0.e Yes
Hardware amd ryzen_5_5625u - No
Operating System amd ryzen_5_5600u_firmware < cezannepi-fp6_1.0.0.e Yes
Hardware amd ryzen_5_5600u - No
Operating System amd ryzen_5_5560u_firmware < cezannepi-fp6_1.0.0.e Yes
Hardware amd ryzen_5_5560u - No
Operating System amd ryzen_3_5425u_firmware < cezannepi-fp6_1.0.0.e Yes
Hardware amd ryzen_3_5425u - No
Operating System amd ryzen_3_5400u_firmware < cezannepi-fp6_1.0.0.e Yes
Hardware amd ryzen_3_5400u - No
Operating System amd ryzen_3_5125c_firmware < cezannepi-fp6_1.0.0.e Yes
Hardware amd ryzen_3_5125c - No
Operating System amd ryzen_9_6980hx_firmware < rembrandtpi-fp7_1.0.0.8 Yes
Hardware amd ryzen_9_6980hx - No
Operating System amd ryzen_9_6980hs_firmware < rembrandtpi-fp7_1.0.0.8 Yes
Hardware amd ryzen_9_6980hs - No
Operating System amd ryzen_9_6900hx_firmware < rembrandtpi-fp7_1.0.0.8 Yes
Hardware amd ryzen_9_6900hx - No
Operating System amd ryzen_9_6900hs_firmware < rembrandtpi-fp7_1.0.0.8 Yes
Hardware amd ryzen_9_6900hs - No
Operating System amd ryzen_7_6800h_firmware < rembrandtpi-fp7_1.0.0.8 Yes
Hardware amd ryzen_7_6800h - No
Operating System amd ryzen_7_6800hs_firmware < rembrandtpi-fp7_1.0.0.8 Yes
Hardware amd ryzen_7_6800hs - No
Operating System amd ryzen_7_6800u_firmware < rembrandtpi-fp7_1.0.0.8 Yes
Hardware amd ryzen_7_6800u - No
Operating System amd ryzen_5_6600h_firmware < rembrandtpi-fp7_1.0.0.8 Yes
Hardware amd ryzen_5_6600h - No
Operating System amd ryzen_5_6600hs_firmware < rembrandtpi-fp7_1.0.0.8 Yes
Hardware amd ryzen_5_6600hs - No
Operating System amd ryzen_5_6600u_firmware < rembrandtpi-fp7_1.0.0.8 Yes
Hardware amd ryzen_5_6600u - No
Operating System amd ryzen_5_7520u_firmware < mendocinopi-ft6_1.0.0.5 Yes
Hardware amd ryzen_5_7520u - No
Operating System amd ryzen_3_7320u_firmware < mendocinopi-ft6_1.0.0.5 Yes
Hardware amd ryzen_3_7320u - No
Operating System amd ryzen_7_pro_7730u_firmware < cezannepi-fp6_1.0.0.e Yes
Hardware amd ryzen_7_pro_7730u - No
Operating System amd ryzen_5_pro_7530u_firmware < cezannepi-fp6_1.0.0.e Yes
Hardware amd ryzen_5_pro_7530u - No
Operating System amd ryzen_3_pro_7330u_firmware < cezannepi-fp6_1.0.0.e Yes
Hardware amd ryzen_3_pro_7330u - No

References

How SecUtils Interprets This CVE

SecUtils normalizes and enriches National Vulnerability Database (NVD) records by standardizing vendor and product identifiers, aggregating vulnerability metadata from both NVD and MITRE sources, and providing structured context for security teams. For amd's affected products, we extract Common Platform Enumeration (CPE) data, Common Weakness Enumeration (CWE) classifications, CVSS severity metrics, and reference data to enable rapid vulnerability prioritization and asset correlation. This record contains no exploit code, proof-of-concept instructions, or attack methodologies—only defensive intelligence necessary for patch management, risk assessment, and security operations.