Veille CVE
CVE-2023-20577
7.4 ÉlevéeDescription
A heap overflow in SMM module may allow an attacker with access to a second vulnerability that enables writing to SPI flash, potentially resulting in arbitrary code execution.
Produits concernés
- AMD 2nd Gen AMD EPYC™ Processors
- AMD 3rd Gen AMD EPYC™ Processors
- AMD 4th Gen AMD EPYC™ Processors
- AMD Instinct™ MI300A
- AMD Ryzen™ 3000 Series Desktop Processors
- AMD Ryzen™ 5000 Series Desktop Processors
- AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics
- AMD Ryzen™ 7000 Series Processors
- AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics
- AMD Ryzen™ 4000 Series Desktop Processors with Radeon™ Graphics
- AMD Ryzen™ Threadripper™ 3000 Series Processors
- AMD Ryzen™ Threadripper™ PRO 3000WX Series Processors
- AMD Ryzen™ Threadripper™ PRO 5000WX Processors
- AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics
- AMD Ryzen™ 3000 Series Mobile Processor with Radeon™ Graphics
- AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics
- AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics
- AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics
- AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics
- AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics
- AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics
- AMD Ryzen™ 3000 Series Processors with Radeon™ Graphics
- AMD Ryzen™ 7040 Series Processors with Radeon™ Graphics
- AMD Ryzen™ 7045 Series Mobile Processors
- AMD EPYC™ Embedded 3000
Scores CVSS
| Version | Score | Source | Vecteur |
|---|---|---|---|
| 3.1 | 7.4 Élevée | psirt@amd.com | CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H |