Vulnerability · Published Nov 14, 2023 · Assigned by AMD

CVE-2022-23821

Critical 9.8

In plain English

A critical-severity security flaw in AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics “Barcelo” from AMD. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.0% (higher than 63% of all known vulnerabilities).

Severity (CVSS NVD)9.8Critical
Exploit odds (30 days)1.0%top 37.3% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

Improper access control in System Management Mode (SMM) may allow an attacker to write to SPI ROM potentially leading to arbitrary code execution.

Affected products (as reported)

VendorProductVersions
AMD Ryzen™ 3000 Series Desktop Processors “Matisse” various
AMD Ryzen™ 5000 Series Desktop Processors “Vermeer” various
AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics “Cezanne” various
AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics “Picasso” AM4 various
AMD Ryzen™ Threadripper™ 2000 Series Processors “Colfax” various
AMD Ryzen™ Threadripper™ 3000 Series Processors “Castle Peak” HEDT various
AMD Ryzen™ Threadripper™ PRO Processors “Castle Peak” WS SP3 various
AMD Ryzen™ Threadripper™ PRO 3000WX Series Processors “Chagall” WS various
AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Dali”/”Dali” FP5 various
AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Pollock” various
AMD Ryzen™ 3000 Series Mobile Processor with Radeon™ Graphics “Picasso” FP5 various
AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics “Renoir” FP6 various
AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Lucienne” various
AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics “Picasso” AM4 various
AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Cezanne” various
AMD AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics "Rembrandt" various
AMD AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics “Rembrandt-R” various
AMD AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics “Barcelo” various
AMD AMD Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphics “Barcelo-R” various
AMD AMD Ryzen™ Embedded R1000 various
AMD AMD Ryzen™ Embedded R2000 various
AMD AMD Ryzen™ Embedded 5000 various
AMD AMD Ryzen™ Embedded V1000 various
AMD AMD Ryzen™ Embedded V2000 various
AMD AMD Ryzen™ Embedded V3000 various

References