Vulnerability Intelligence Report
CVE-2022-23821
Improper access control in System Management Mode (SMM) may allow an attacker to write to SPI ROM potentially leading to arbitrary code execution.
No Active Exploit Signals
CVSS Base Score
9.8
CRITICAL
EPSS Probability:0.99%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| AMD | Ryzen™ 3000 Series Desktop Processors “Matisse” | various (affected) |
| AMD | Ryzen™ 5000 Series Desktop Processors “Vermeer” | various (affected) |
| AMD | Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics “Cezanne” | various (affected) |
| AMD | Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics “Picasso” AM4 | various (affected) |
| AMD | Ryzen™ Threadripper™ 2000 Series Processors “Colfax” | various (affected) |
| AMD | Ryzen™ Threadripper™ 3000 Series Processors “Castle Peak” HEDT | various (affected) |
| AMD | Ryzen™ Threadripper™ PRO Processors “Castle Peak” WS SP3 | various (affected) |
| AMD | Ryzen™ Threadripper™ PRO 3000WX Series Processors “Chagall” WS | various (affected) |
| AMD | Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Dali”/”Dali” FP5 | various (affected) |
| AMD | Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Pollock” | various (affected) |
| AMD | Ryzen™ 3000 Series Mobile Processor with Radeon™ Graphics “Picasso” FP5 | various (affected) |
| AMD | Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics “Renoir” FP6 | various (affected) |
| AMD | Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Lucienne” | various (affected) |
| AMD | Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics “Picasso” AM4 | various (affected) |
| AMD | Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Cezanne” | various (affected) |
| AMD | AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics "Rembrandt" | various (affected) |
| AMD | AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics “Rembrandt-R” | various (affected) |
| AMD | AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics “Barcelo” | various (affected) |
| AMD | AMD Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphics “Barcelo-R” | various (affected) |
| AMD | AMD Ryzen™ Embedded R1000 | various (affected) |
| AMD | AMD Ryzen™ Embedded R2000 | various (affected) |
| AMD | AMD Ryzen™ Embedded 5000 | various (affected) |
| AMD | AMD Ryzen™ Embedded V1000 | various (affected) |
| AMD | AMD Ryzen™ Embedded V2000 | various (affected) |
| AMD | AMD Ryzen™ Embedded V3000 | various (affected) |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
EPSS Score
0.989%
GitHub Advisory
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | Advanced Micro Devices Inc. · Vendor · USA |
| Reserved | 2022-01-21T17:20:55 |
| Published | 2023-11-14T18:54:32 |
| Patch Date | 2023-11-14 |
| Last Updated | 2024-12-03T14:26:05 |
Community Chatter & Buzz