Vulnerability Intelligence Report
CVE-2023-20563
Insufficient protections in System Management Mode (SMM) code may allow an attacker to potentially enable escalation of privilege via local access.
No Active Exploit Signals
CVSS Base Score
7.8
HIGH
Exploitability:1.9
Impact Score:5.9
EPSS Probability:0.20%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| AMD | Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics “Cezanne” | various (affected) |
| AMD | Ryzen™ 7000 Series Desktop Processors “Raphael” XD3 | various (affected) |
| AMD | Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Cezanne” | various (affected) |
| AMD | AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics "Rembrandt" | various (affected) |
| AMD | AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics “Rembrandt-R” | various (affected) |
| AMD | AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics “Barcelo” | various (affected) |
| AMD | AMD Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphics “Barcelo-R” | various (affected) |
| AMD | Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics “Phoenix” FP7/FP7r2/FP8 | various (affected) |
| AMD | AMD Ryzen™ Embedded R1000 | various (affected) |
| AMD | AMD Ryzen™ Embedded R2000 | various (affected) |
| AMD | AMD Ryzen™ Embedded 5000 | various (affected) |
| AMD | AMD Ryzen™ Embedded V3000 | various (affected) |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
EPSS Score
0.204%
GitHub Advisory
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | Advanced Micro Devices Inc. · Vendor · USA |
| Reserved | 2022-10-27T18:53:39 |
| Published | 2023-11-14T18:54:41 |
| Patch Date | 2023-11-14 |
| Last Updated | 2024-10-22T13:44:05 |
Community Chatter & Buzz