AMD AMD RyzenTM Embedded V3000

• CVE-2023-20578 High 7.5 A TOCTOU (Time-Of-Check-Time-Of-Use) in SMM may allow an attacker with ring0 privileges and access to the BIOS menu or UEFI shell to modify the communications buffer potentially resulting in arbitrary 0.1%
• CVE-2022-23829 High 8.2 A potential weakness in AMD SPI protection features may allow a malicious attacker with Ring0 (kernel mode) access to bypass the native System Management Mode (SMM) ROM protections. 0.2%