cbcvebase.
CVE-2022-23821
published 2023-11-14

CVE-2022-23821: Improper access control in System Management Mode (SMM) may allow an attacker to write to SPI ROM potentially leading to arbitrary code execution.

PriorityP355critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EPSS
0.99%
62.1th percentile
Improper access control in System Management Mode (SMM) may allow an attacker to write to SPI ROM potentially leading to arbitrary code execution.

Affected

150 ranges· showing 25
VendorProductVersion rangeFixed in
amdamd_ryzen_5000_series_processors_with_radeon_graphics_barcelo——
amdamd_ryzen_6000_series_processors_with_radeon_graphics_rembrandt——
amdamd_ryzen_7030_series_mobile_processors_with_radeon_graphics_barcelo-r——
amdamd_ryzen_7035_series_processors_with_radeon_graphics_rembrandt-r——
amdamd_ryzen_embedded_5000——
amdamd_ryzen_embedded_r1000——
amdamd_ryzen_embedded_r2000——
amdamd_ryzen_embedded_v1000——
amdamd_ryzen_embedded_v2000——
amdamd_ryzen_embedded_v3000——
amdathlon_3000_series_desktop_processors_with_radeon_graphics_picasso_am4——
amdathlon_3000_series_mobile_processors_with_radeon_graphics_dali_dali_fp5——
amdathlon_3000_series_mobile_processors_with_radeon_graphics_pollock——
amdathlon_3015ce_firmware——
amdathlon_3015e_firmware——
amdryzen_3000_series_desktop_processors_matisse——
amdryzen_3000_series_mobile_processor_with_radeon_graphics_picasso_fp5——
amdryzen_3_3100_firmware——
amdryzen_3_3100_firmware——
amdryzen_3_3200u_firmware——
amdryzen_3_3250c_firmware——
amdryzen_3_3250u_firmware——
amdryzen_3_3300u_firmware——
amdryzen_3_3300x_firmware——
amdryzen_3_3300x_firmware——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.