Amd Ryzen 7 5700 Firmware vulnerabilities
7 known vulnerabilities affecting amd/ryzen_7_5700_firmware.
Total CVEs
7
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL2HIGH4MEDIUM1
Vulnerabilities
Page 1 of 1
CVE-2022-23820CRITICALCVSS 9.8vcomboam4v2_pi_1.2.0.82023-11-14
CVE-2022-23820 [HIGH] CWE-20 CVE-2022-23820: Failure to validate the AMD SMM communication buffer
may allow an attacker to corrupt the SMRAM pote
Failure to validate the AMD SMM communication buffer
may allow an attacker to corrupt the SMRAM potentially leading to arbitrary
code execution.
nvd
CVE-2022-23821CRITICALCVSS 9.8vcomboam4v2_pi_1.2.0.82023-11-14
CVE-2022-23821 [CRITICAL] CVE-2022-23821: Improper access control in System Management Mode (SMM) may allow an attacker to write to SPI ROM po
Improper access control in System Management Mode (SMM) may allow an attacker to write to SPI ROM potentially leading to arbitrary code execution.
nvd
CVE-2023-20563HIGHCVSS 7.8fixed in comboam4v2_1.2.0.b2023-11-14
CVE-2023-20563 [HIGH] CWE-269 CVE-2023-20563: Insufficient protections in System Management Mode (SMM) code may allow an attacker to potentially e
Insufficient protections in System Management Mode (SMM) code may allow an attacker to potentially enable escalation of privilege via local access.
nvd
CVE-2023-20565HIGHCVSS 7.8fixed in comboam4v2_1.2.0.b2023-11-14
CVE-2023-20565 [HIGH] CWE-269 CVE-2023-20565: Insufficient protections in System Management Mode (SMM) code may allow an attacker to potentially e
Insufficient protections in System Management Mode (SMM) code may allow an attacker to potentially enable escalation of privilege via local access.
nvd
CVE-2023-20571HIGHCVSS 8.1fixed in comboam4v2_1.2.0.b2023-11-14
CVE-2023-20571 [HIGH] CVE-2023-20571: A race condition in System Management Mode (SMM) code may allow an attacker using a compromised user
A race condition in System Management Mode (SMM) code may allow an attacker using a compromised user space to leverage CVE-2018-8897 potentially resulting in privilege escalation.
nvd
CVE-2023-20555HIGHCVSS 7.8fixed in comboam4v2_pi_1.2.0.a2023-08-08
CVE-2023-20555 [HIGH] CWE-787 CVE-2023-20555: Insufficient input validation in
CpmDisplayFeatureSmm may allow an attacker to corrupt SMM memory by
Insufficient input validation in
CpmDisplayFeatureSmm may allow an attacker to corrupt SMM memory by overwriting
an arbitrary bit in an attacker-controlled pointer potentially leading to
arbitrary code execution in SMM.
nvd
CVE-2023-20569MEDIUMCVSS 4.7fixed in comboam4v2pi_1.2.0.b2023-08-08
CVE-2023-20569 [MEDIUM] CWE-203 CVE-2023-20569:
A side channel vulnerability on some of the AMD CPUs may allow an attacker to influence the retur
A side channel vulnerability on some of the AMD CPUs may allow an attacker to influence the return address prediction. This may result in speculative execution at an attacker-controlled address, potentially leading to information disclosure.
nvd