Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-20565


Insufficient protections in System Management Mode (SMM) code may allow an attacker to potentially enable escalation of privilege via local access.


Security Impact Summary

This vulnerability carries a HIGH severity rating with a CVSS v3.1 score of 7.8, requiring local system access to exploit with relatively low complexity without requiring user interaction requiring only low-level privileges . The vulnerability impacts confidentiality (data exposure), integrity (unauthorized modifications), and availability (service disruption) for affected systems. Impacting 142 products from amd, from amd, from amd and 139 others, organizations running these solutions should prioritize assessment and patching.

Historical Context

Reported in 2023, this vulnerability emerged during an era marked by increased sophistication in supply chain attacks, cloud infrastructure vulnerabilities, and software-as-a-service (SaaS) security challenges. Security practices during this period emphasized zero-trust architectures, container security, and API protection.


Published

2023-11-14T19:15:15.783

Last Modified

2024-11-21T07:41:07.917

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.8 (HIGH)

Weaknesses
  • Type: Primary
    CWE-269

Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System amd ryzen_3_5100_firmware < comboam4v2_1.2.0.b Yes
Hardware amd ryzen_3_5100 - No
Operating System amd ryzen_3_5300g_firmware < comboam4v2_1.2.0.b Yes
Hardware amd ryzen_3_5300g - No
Operating System amd ryzen_3_5300ge_firmware < comboam4v2_1.2.0.b Yes
Hardware amd ryzen_3_5300ge - No
Operating System amd ryzen_5_5500_firmware < comboam4v2_1.2.0.b Yes
Hardware amd ryzen_5_5500 - No
Operating System amd ryzen_5_5600g_firmware < comboam4v2_1.2.0.b Yes
Hardware amd ryzen_5_5600g - No
Operating System amd ryzen_5_5600ge_firmware < comboam4v2_1.2.0.b Yes
Hardware amd ryzen_5_5600ge - No
Operating System amd ryzen_7_5700_firmware < comboam4v2_1.2.0.b Yes
Hardware amd ryzen_7_5700 - No
Operating System amd ryzen_7_5700g_firmware < comboam4v2_1.2.0.b Yes
Hardware amd ryzen_7_5700g - No
Operating System amd ryzen_7_5700ge_firmware < comboam4v2_1.2.0.b Yes
Hardware amd ryzen_7_5700ge - No
Operating System amd ryzen_5_7500f_firmware < comboam5_1.0.7.0 Yes
Hardware amd ryzen_5_7500f - No
Operating System amd ryzen_5_7600_firmware < comboam5_1.0.7.0 Yes
Hardware amd ryzen_5_7600 - No
Operating System amd ryzen_5_7600x_firmware < comboam5_1.0.7.0 Yes
Hardware amd ryzen_5_7600x - No
Operating System amd ryzen_7_7700_firmware < comboam5_1.0.7.0 Yes
Hardware amd ryzen_7_7700 - No
Operating System amd ryzen_7_7700x_firmware < comboam5_1.0.7.0 Yes
Hardware amd ryzen_7_7700x - No
Operating System amd ryzen_7_7800x3d_firmware < comboam5_1.0.7.0 Yes
Hardware amd ryzen_7_7800x3d - No
Operating System amd ryzen_9_7900_firmware < comboam5_1.0.7.0 Yes
Hardware amd ryzen_9_7900 - No
Operating System amd ryzen_9_7900x_firmware < comboam5_1.0.7.0 Yes
Hardware amd ryzen_9_7900x - No
Operating System amd ryzen_9_7900x3d_firmware < comboam5_1.0.7.0 Yes
Hardware amd ryzen_9_7900x3d - No
Operating System amd ryzen_9_7950x_firmware < comboam5_1.0.7.0 Yes
Hardware amd ryzen_9_7950x - No
Operating System amd ryzen_9_7950x3d_firmware < comboam5_1.0.7.0 Yes
Hardware amd ryzen_9_7950x3d - No
Operating System amd ryzen_pro_3900_firmware < comboam5_1.0.7.0 Yes
Hardware amd ryzen_pro_3900 - No
Operating System amd ryzen_pro_7645_firmware < comboam5_1.0.7.0 Yes
Hardware amd ryzen_pro_7645 - No
Operating System amd ryzen_pro_7745_firmware < comboam5_1.0.7.0 Yes
Hardware amd ryzen_pro_7745 - No
Operating System amd ryzen_pro_7945_firmware < comboam5_1.0.7.0 Yes
Hardware amd ryzen_pro_7945 - No
Operating System amd ryzen_3_5125c_firmware < cezannepi-fp6_1.0.0.f Yes
Hardware amd ryzen_3_5125c - No
Operating System amd ryzen_3_5400u_firmware < cezannepi-fp6_1.0.0.f Yes
Hardware amd ryzen_3_5400u - No
Operating System amd ryzen_3_5425u_firmware < cezannepi-fp6_1.0.0.f Yes
Hardware amd ryzen_3_5425u - No
Operating System amd ryzen_5_5500h_firmware < cezannepi-fp6_1.0.0.f Yes
Hardware amd ryzen_5_5500h - No
Operating System amd ryzen_5_5560u_firmware < cezannepi-fp6_1.0.0.f Yes
Hardware amd ryzen_5_5560u - No
Operating System amd ryzen_5_5600h_firmware < cezannepi-fp6_1.0.0.f Yes
Hardware amd ryzen_5_5600h - No
Operating System amd ryzen_5_5600hs_firmware < cezannepi-fp6_1.0.0.f Yes
Hardware amd ryzen_5_5600hs - No
Operating System amd ryzen_5_5600u_firmware < cezannepi-fp6_1.0.0.f Yes
Hardware amd ryzen_5_5600u - No
Operating System amd ryzen_5_5625u_firmware < cezannepi-fp6_1.0.0.f Yes
Hardware amd ryzen_5_5625u - No
Operating System amd ryzen_7_5800h_firmware < cezannepi-fp6_1.0.0.f Yes
Hardware amd ryzen_7_5800h - No
Operating System amd ryzen_7_5800hs_firmware < cezannepi-fp6_1.0.0.f Yes
Hardware amd ryzen_7_5800hs - No
Operating System amd ryzen_7_5800u_firmware < cezannepi-fp6_1.0.0.f Yes
Hardware amd ryzen_7_5800u - No
Operating System amd ryzen_7_5825u_firmware < cezannepi-fp6_1.0.0.f Yes
Hardware amd ryzen_7_5825u - No
Operating System amd ryzen_9_5900hs_firmware < cezannepi-fp6_1.0.0.f Yes
Hardware amd ryzen_9_5900hs - No
Operating System amd ryzen_9_5900hx_firmware < cezannepi-fp6_1.0.0.f Yes
Hardware amd ryzen_9_5900hx - No
Operating System amd ryzen_9_5980hs_firmware < cezannepi-fp6_1.0.0.f Yes
Hardware amd ryzen_9_5980hs - No
Operating System amd ryzen_9_5980hx_firmware < cezannepi-fp6_1.0.0.f Yes
Hardware amd ryzen_9_5980hx - No
Operating System amd ryzen_9_6980hx_firmware < rembrandtpi-fp7_1.0.0.9 Yes
Hardware amd ryzen_9_6980hx - No
Operating System amd ryzen_9_6980hs_firmware < rembrandtpi-fp7_1.0.0.9 Yes
Hardware amd ryzen_9_6980hs - No
Operating System amd ryzen_9_6900hx_firmware < rembrandtpi-fp7_1.0.0.9 Yes
Hardware amd ryzen_9_6900hx - No
Operating System amd ryzen_9_6900hs_firmware < rembrandtpi-fp7_1.0.0.9 Yes
Hardware amd ryzen_9_6900hs - No
Operating System amd ryzen_7_6800h_firmware < rembrandtpi-fp7_1.0.0.9 Yes
Hardware amd ryzen_7_6800h - No
Operating System amd ryzen_7_6800hs_firmware < rembrandtpi-fp7_1.0.0.9 Yes
Hardware amd ryzen_7_6800hs - No
Operating System amd ryzen_7_6800u_firmware < rembrandtpi-fp7_1.0.0.9 Yes
Hardware amd ryzen_7_6800u - No
Operating System amd ryzen_5_6600h_firmware < rembrandtpi-fp7_1.0.0.9 Yes
Hardware amd ryzen_5_6600h - No
Operating System amd ryzen_5_6600hs_firmware < rembrandtpi-fp7_1.0.0.9 Yes
Hardware amd ryzen_5_6600hs - No
Operating System amd ryzen_5_6600u_firmware < rembrandtpi-fp7_1.0.0.9 Yes
Hardware amd ryzen_5_6600u - No
Operating System amd ryzen_7_7735hs_firmware < rembrandtpi-fp7_1.0.0.9 Yes
Hardware amd ryzen_7_7735hs - No
Operating System amd ryzen_7_7736u_firmware < rembrandtpi-fp7_1.0.0.9 Yes
Hardware amd ryzen_7_7736u - No
Operating System amd ryzen_7_7735u_firmware < rembrandtpi-fp7_1.0.0.9 Yes
Hardware amd ryzen_7_7735u - No
Operating System amd ryzen_5_7535hs_firmware < rembrandtpi-fp7_1.0.0.9 Yes
Hardware amd ryzen_5_7535hs - No
Operating System amd ryzen_5_7535u_firmware < rembrandtpi-fp7_1.0.0.9 Yes
Hardware amd ryzen_5_7535u - No
Operating System amd ryzen_3_7335u_firmware < rembrandtpi-fp7_1.0.0.9 Yes
Hardware amd ryzen_3_7335u - No
Operating System amd ryzen_7_pro_7730u_firmware < cezannepi-fp6_1.0.0.f Yes
Hardware amd ryzen_7_pro_7730u - No
Operating System amd ryzen_9_pro_7940hs_firmware < phoenixpi-fp8-fp7_pi_1.0.0.1g Yes
Hardware amd ryzen_9_pro_7940hs - No
Operating System amd ryzen_9_pro_7940h_firmware < phoenixpi-fp8-fp7_pi_1.0.0.1g Yes
Hardware amd ryzen_9_pro_7940h - No
Operating System amd ryzen_7_pro_7840hs_firmware < phoenixpi-fp8-fp7_pi_1.0.0.1g Yes
Hardware amd ryzen_7_pro_7840hs - No
Operating System amd ryzen_7_pro_7840h_firmware < phoenixpi-fp8-fp7_pi_1.0.0.1g Yes
Hardware amd ryzen_7_pro_7840h - No
Operating System amd ryzen_7_pro_7840u_firmware < phoenixpi-fp8-fp7_pi_1.0.0.1g Yes
Hardware amd ryzen_7_pro_7840u - No
Operating System amd ryzen_5_pro_7640hs_firmware < phoenixpi-fp8-fp7_pi_1.0.0.1g Yes
Hardware amd ryzen_5_pro_7640hs - No
Operating System amd ryzen_5_pro_7640h_firmware < phoenixpi-fp8-fp7_pi_1.0.0.1g Yes
Hardware amd ryzen_5_pro_7640h - No
Operating System amd ryzen_5_pro_7640u_firmware < phoenixpi-fp8-fp7_pi_1.0.0.1g Yes
Hardware amd ryzen_5_pro_7640u - No
Operating System amd ryzen_5_pro_7545u_firmware < phoenixpi-fp8-fp7_pi_1.0.0.1g Yes
Hardware amd ryzen_5_pro_7545u - No
Operating System amd ryzen_5_pro_7540u_firmware < phoenixpi-fp8-fp7_pi_1.0.0.1g Yes
Hardware amd ryzen_5_pro_7540u - No
Operating System amd ryzen_3_pro_7440u_firmware < phoenixpi-fp8-fp7_pi_1.0.0.1g Yes
Hardware amd ryzen_3_pro_7440u - No
Operating System amd ryzen_5_pro_7530u_firmware < cezannepi-fp6_1.0.0.f Yes
Hardware amd ryzen_5_pro_7530u - No
Operating System amd ryzen_3_pro_7330u_firmware < cezannepi-fp6_1.0.0.f Yes
Hardware amd ryzen_3_pro_7330u - No
Operating System amd ryzen_7_pro_7730u_firmware < cezannepi-fp6_1.0.0.f Yes
Hardware amd ryzen_7_pro_7730u - No

References

How SecUtils Interprets This CVE

SecUtils normalizes and enriches National Vulnerability Database (NVD) records by standardizing vendor and product identifiers, aggregating vulnerability metadata from both NVD and MITRE sources, and providing structured context for security teams. For amd's affected products, we extract Common Platform Enumeration (CPE) data, Common Weakness Enumeration (CWE) classifications, CVSS severity metrics, and reference data to enable rapid vulnerability prioritization and asset correlation. This record contains no exploit code, proof-of-concept instructions, or attack methodologies—only defensive intelligence necessary for patch management, risk assessment, and security operations.