Amd Ryzen 7 Pro 7730U Firmware vulnerabilities
6 known vulnerabilities affecting amd/ryzen_7_pro_7730u_firmware.
Total CVEs
6
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH4MEDIUM2
Vulnerabilities
Page 1 of 1
CVE-2023-20563HIGHCVSS 7.8fixed in cezannepi-fp6_1.0.0.f2023-11-14
CVE-2023-20563 [HIGH] CWE-269 CVE-2023-20563: Insufficient protections in System Management Mode (SMM) code may allow an attacker to potentially e
Insufficient protections in System Management Mode (SMM) code may allow an attacker to potentially enable escalation of privilege via local access.
nvd
CVE-2023-20565HIGHCVSS 7.8fixed in cezannepi-fp6_1.0.0.f2023-11-14
CVE-2023-20565 [HIGH] CWE-269 CVE-2023-20565: Insufficient protections in System Management Mode (SMM) code may allow an attacker to potentially e
Insufficient protections in System Management Mode (SMM) code may allow an attacker to potentially enable escalation of privilege via local access.
nvd
CVE-2023-20571HIGHCVSS 8.1fixed in cezannepi-fp6_1.0.0.f2023-11-14
CVE-2023-20571 [HIGH] CVE-2023-20571: A race condition in System Management Mode (SMM) code may allow an attacker using a compromised user
A race condition in System Management Mode (SMM) code may allow an attacker using a compromised user space to leverage CVE-2018-8897 potentially resulting in privilege escalation.
nvd
CVE-2021-46758MEDIUMCVSS 6.1fixed in cezannepi-fp6_1.0.0.c2023-11-14
CVE-2021-46758 [MEDIUM] CVE-2021-46758: Insufficient validation of SPI flash addresses in the ASP (AMD Secure Processor) bootloader may allo
Insufficient validation of SPI flash addresses in the ASP (AMD Secure Processor) bootloader may allow an attacker to read data in memory mapped beyond SPI flash resulting in a potential loss of availability and integrity.
nvd
CVE-2023-20555HIGHCVSS 7.8fixed in cezannepi-fp6_1.0.0.e2023-08-08
CVE-2023-20555 [HIGH] CWE-787 CVE-2023-20555: Insufficient input validation in
CpmDisplayFeatureSmm may allow an attacker to corrupt SMM memory by
Insufficient input validation in
CpmDisplayFeatureSmm may allow an attacker to corrupt SMM memory by overwriting
an arbitrary bit in an attacker-controlled pointer potentially leading to
arbitrary code execution in SMM.
nvd
CVE-2023-20569MEDIUMCVSS 4.7fixed in cezannepi-fp6_1.0.0.fa2023-08-08
CVE-2023-20569 [MEDIUM] CWE-203 CVE-2023-20569:
A side channel vulnerability on some of the AMD CPUs may allow an attacker to influence the retur
A side channel vulnerability on some of the AMD CPUs may allow an attacker to influence the return address prediction. This may result in speculative execution at an attacker-controlled address, potentially leading to information disclosure.
nvd