CVE-2023-20558

Yüksek

Açıklama

AmdCpmOemSmm içindeki yetersiz kontrol akışı yönetimi, ayrıcalıklı bir saldırganın SMM işleyicisine müdahale etmesine izin verebilir ve bu durum potansiyel olarak yetki yükseltmeye yol açabilir.

ÖnemYüksek
CVSS8.8
İstismar olasılığı—
ÜrünAmd Ryzen 7 5700g Firmware
Yayın2 Nis 2023
İlk görülme2 Nis 2023
Zayıflık türüCWE-670CWE-670

Nasıl düzeltilir

Güncelleyin
  • amd ryzen_7_5700g_firmwarecomboam4_v2_pi_1.2.0.6c ya da sonraki bir sürüm
  • amd ryzen_7_5700ge_firmwarecomboam4_v2_pi_1.2.0.6c ya da sonraki bir sürüm
  • amd ryzen_5_5600g_firmwarecomboam4_v2_pi_1.2.0.6c ya da sonraki bir sürüm
  • amd ryzen_5_5600ge_firmwarecomboam4_v2_pi_1.2.0.6c ya da sonraki bir sürüm
  • amd ryzen_3_5300g_firmwarecomboam4_v2_pi_1.2.0.6c ya da sonraki bir sürüm
  • amd ryzen_3_5300ge_firmwarecomboam4_v2_pi_1.2.0.6c ya da sonraki bir sürüm
  • amd ryzen_9_5980hx_firmwarecezannepi-fp6_1.0.0.9 ya da sonraki bir sürüm
  • amd ryzen_9_5980hs_firmwarecezannepi-fp6_1.0.0.9 ya da sonraki bir sürüm
  • amd ryzen_7_5825u_firmwarecezannepi-fp6_1.0.0.9 ya da sonraki bir sürüm
  • amd ryzen_9_5900hx_firmwarecezannepi-fp6_1.0.0.9 ya da sonraki bir sürüm
  • amd ryzen_9_5900hs_firmwarecezannepi-fp6_1.0.0.9 ya da sonraki bir sürüm
  • amd ryzen_7_5825c_firmwarecezannepi-fp6_1.0.0.9 ya da sonraki bir sürüm

Etkilenen ürünler

ÜrünEtkilenen sürümlerDüzeltildiği sürüm
amd ryzen_7_5700g_firmwarev < comboam4_v2_pi_1.2.0.6ccomboam4_v2_pi_1.2.0.6c
amd ryzen_7_5700ge_firmwarev < comboam4_v2_pi_1.2.0.6ccomboam4_v2_pi_1.2.0.6c
amd ryzen_5_5600g_firmwarev < comboam4_v2_pi_1.2.0.6ccomboam4_v2_pi_1.2.0.6c
amd ryzen_5_5600ge_firmwarev < comboam4_v2_pi_1.2.0.6ccomboam4_v2_pi_1.2.0.6c
amd ryzen_3_5300g_firmwarev < comboam4_v2_pi_1.2.0.6ccomboam4_v2_pi_1.2.0.6c
amd ryzen_3_5300ge_firmwarev < comboam4_v2_pi_1.2.0.6ccomboam4_v2_pi_1.2.0.6c
amd ryzen_9_5980hx_firmwarev < cezannepi-fp6_1.0.0.9cezannepi-fp6_1.0.0.9
amd ryzen_9_5980hs_firmwarev < cezannepi-fp6_1.0.0.9cezannepi-fp6_1.0.0.9
amd ryzen_7_5825u_firmwarev < cezannepi-fp6_1.0.0.9cezannepi-fp6_1.0.0.9
amd ryzen_9_5900hx_firmwarev < cezannepi-fp6_1.0.0.9cezannepi-fp6_1.0.0.9
amd ryzen_9_5900hs_firmwarev < cezannepi-fp6_1.0.0.9cezannepi-fp6_1.0.0.9
amd ryzen_7_5825c_firmwarev < cezannepi-fp6_1.0.0.9cezannepi-fp6_1.0.0.9
amd ryzen_7_5800h_firmwarev < cezannepi-fp6_1.0.0.9cezannepi-fp6_1.0.0.9
amd ryzen_5_5625u_firmwarev < cezannepi-fp6_1.0.0.9cezannepi-fp6_1.0.0.9
amd ryzen_7_5800hs_firmwarev < cezannepi-fp6_1.0.0.9cezannepi-fp6_1.0.0.9
amd ryzen_5_5625c_firmwarev < cezannepi-fp6_1.0.0.9cezannepi-fp6_1.0.0.9
amd ryzen_5_5600h_firmwarev < cezannepi-fp6_1.0.0.9cezannepi-fp6_1.0.0.9
amd ryzen_5_5600hs_firmwarev < cezannepi-fp6_1.0.0.9cezannepi-fp6_1.0.0.9
amd ryzen_7_5800u_firmwarev < cezannepi-fp6_1.0.0.9cezannepi-fp6_1.0.0.9
amd ryzen_5_5600u_firmwarev < cezannepi-fp6_1.0.0.9cezannepi-fp6_1.0.0.9
amd ryzen_5_5560u_firmwarev < cezannepi-fp6_1.0.0.9cezannepi-fp6_1.0.0.9
amd ryzen_3_5425u_firmwarev < cezannepi-fp6_1.0.0.9cezannepi-fp6_1.0.0.9
amd ryzen_3_5425c_firmwarev < cezannepi-fp6_1.0.0.9cezannepi-fp6_1.0.0.9
amd ryzen_3_5400u_firmwarev < cezannepi-fp6_1.0.0.9cezannepi-fp6_1.0.0.9
amd ryzen_3_5125c_firmwarev < cezannepi-fp6_1.0.0.9cezannepi-fp6_1.0.0.9
amd athlon_silver_3050u_firmwareAralık belirtilmemiş—
amd athlon_gold_3150u_firmwareAralık belirtilmemiş—
amd ryzen_3_3200u_firmwareAralık belirtilmemiş—
amd ryzen_3_3250u_firmwareAralık belirtilmemiş—
amd ryzen_3_3300u_firmwareAralık belirtilmemiş—
amd ryzen_3_3350u_firmwareAralık belirtilmemiş—
amd ryzen_3_3450u_firmwareAralık belirtilmemiş—
amd ryzen_3_3500u_firmwareAralık belirtilmemiş—
amd ryzen_3_3500c_firmwareAralık belirtilmemiş—
amd ryzen_3_3550h_firmwareAralık belirtilmemiş—
amd ryzen_3_3580u_firmwareAralık belirtilmemiş—
amd ryzen_3_3700u_firmwareAralık belirtilmemiş—
amd ryzen_3_3700c_firmwareAralık belirtilmemiş—
amd ryzen_3_3750h_firmwareAralık belirtilmemiş—
amd ryzen_3_3780u_firmwareAralık belirtilmemiş—
amd ryzen_3_2200u_firmwarev < comboam4v2_pi_1.2.0.6ccomboam4v2_pi_1.2.0.6c
amd ryzen_3_2300u_firmwarev < comboam4v2_pi_1.2.0.6ccomboam4v2_pi_1.2.0.6c
amd ryzen_5_2500u_firmwarev < comboam4v2_pi_1.2.0.6ccomboam4v2_pi_1.2.0.6c
amd ryzen_5_2600_firmwarev < comboam4v2_pi_1.2.0.6ccomboam4v2_pi_1.2.0.6c
amd ryzen_5_2600h_firmwarev < comboam4v2_pi_1.2.0.6ccomboam4v2_pi_1.2.0.6c
amd ryzen_5_2600x_firmwarev < comboam4v2_pi_1.2.0.6ccomboam4v2_pi_1.2.0.6c
amd ryzen_5_2700_firmwarev < comboam4v2_pi_1.2.0.6ccomboam4v2_pi_1.2.0.6c
amd ryzen_5_2700x_firmwarev < comboam4v2_pi_1.2.0.6ccomboam4v2_pi_1.2.0.6c
amd ryzen_7_2700_firmwarev < comboam4v2_pi_1.2.0.6ccomboam4v2_pi_1.2.0.6c
amd ryzen_7_2700u_firmwarev < comboam4v2_pi_1.2.0.6ccomboam4v2_pi_1.2.0.6c
amd ryzen_7_2700x_firmwarev < comboam4v2_pi_1.2.0.6ccomboam4v2_pi_1.2.0.6c
amd ryzen_7_2800h_firmwarev < comboam4v2_pi_1.2.0.6ccomboam4v2_pi_1.2.0.6c
amd ryzen_3_3300x_firmwarev < comboam4_v2_pi_1.2.0.6ccomboam4_v2_pi_1.2.0.6c
amd ryzen_5_3500_firmwarev < comboam4_v2_pi_1.2.0.6ccomboam4_v2_pi_1.2.0.6c
amd ryzen_5_3500x_firmwarev < comboam4_v2_pi_1.2.0.6ccomboam4_v2_pi_1.2.0.6c
amd ryzen_5_3600_firmwarev < comboam4_v2_pi_1.2.0.6ccomboam4_v2_pi_1.2.0.6c
amd ryzen_5_3600x_firmwarev < comboam4_v2_pi_1.2.0.6ccomboam4_v2_pi_1.2.0.6c
amd ryzen_5_3600xt_firmwarev < comboam4_v2_pi_1.2.0.6ccomboam4_v2_pi_1.2.0.6c
amd ryzen_7_3700x_firmwarev < comboam4_v2_pi_1.2.0.6ccomboam4_v2_pi_1.2.0.6c
amd ryzen_7_3800x_firmwarev < comboam4_v2_pi_1.2.0.6ccomboam4_v2_pi_1.2.0.6c
amd ryzen_7_3800xt_firmwarev < comboam4_v2_pi_1.2.0.6ccomboam4_v2_pi_1.2.0.6c
amd ryzen_9_3900_firmwarev < comboam4_v2_pi_1.2.0.6ccomboam4_v2_pi_1.2.0.6c
amd ryzen_9_3900x_firmwarev < comboam4_v2_pi_1.2.0.6ccomboam4_v2_pi_1.2.0.6c
amd ryzen_9_3900xt_firmwarev < comboam4_v2_pi_1.2.0.6ccomboam4_v2_pi_1.2.0.6c
amd ryzen_9_3950x_firmwarev < comboam4_v2_pi_1.2.0.6ccomboam4_v2_pi_1.2.0.6c
amd ryzen_9_pro_3900_firmwarev < comboam4_v2_pi_1.2.0.6ccomboam4_v2_pi_1.2.0.6c
amd ryzen_threadripper_2990wx_firmwarev < summitpi-sp3r2_1.1.0.5summitpi-sp3r2_1.1.0.5
amd ryzen_threadripper_2970wx_firmwarev < summitpi-sp3r2_1.1.0.5summitpi-sp3r2_1.1.0.5
amd ryzen_threadripper_2950x_firmwarev < summitpi-sp3r2_1.1.0.5summitpi-sp3r2_1.1.0.5
amd ryzen_threadripper_2920x_firmwarev < summitpi-sp3r2_1.1.0.5summitpi-sp3r2_1.1.0.5
amd ryzen_threadripper_3990x_firmwarev < castlepeakpi-sp3r3_1.0.0.6castlepeakpi-sp3r3_1.0.0.6
amd ryzen_threadripper_3970x_firmwarev < castlepeakpi-sp3r3_1.0.0.6castlepeakpi-sp3r3_1.0.0.6
amd ryzen_threadripper_3960x_firmwarev < castlepeakpi-sp3r3_1.0.0.6castlepeakpi-sp3r3_1.0.0.6
amd ryzen_threadripper_pro_3795wx_firmwarev < castlepeakwspi-swrx8_1.0.0.9castlepeakwspi-swrx8_1.0.0.9
amd ryzen_threadripper_pro_3945wx_firmwarev < castlepeakwspi-swrx8_1.0.0.9castlepeakwspi-swrx8_1.0.0.9
amd ryzen_threadripper_pro_3955wx_firmwarev < castlepeakwspi-swrx8_1.0.0.9castlepeakwspi-swrx8_1.0.0.9
amd ryzen_threadripper_pro_3975wx_firmwarev < castlepeakwspi-swrx8_1.0.0.9castlepeakwspi-swrx8_1.0.0.9
amd ryzen_threadripper_pro_3995wx_firmwarev < castlepeakwspi-swrx8_1.0.0.9castlepeakwspi-swrx8_1.0.0.9
amd ryzen_threadripper_pro_5945wx_firmwarev < castlepeakwspi-swrx8_1.0.0.9castlepeakwspi-swrx8_1.0.0.9
amd ryzen_threadripper_pro_5955wx_firmwarev < castlepeakwspi-swrx8_1.0.0.9castlepeakwspi-swrx8_1.0.0.9
amd ryzen_threadripper_pro_5965wx_firmwarev < castlepeakwspi-swrx8_1.0.0.9castlepeakwspi-swrx8_1.0.0.9
amd ryzen_threadripper_pro_5975wx_firmwarev < castlepeakwspi-swrx8_1.0.0.9castlepeakwspi-swrx8_1.0.0.9
amd ryzen_threadripper_pro_5995wx_firmwarev < castlepeakwspi-swrx8_1.0.0.9castlepeakwspi-swrx8_1.0.0.9
amd ryzen_7_4700g_firmwarev < renoirpi-fp6_1.0.0.7renoirpi-fp6_1.0.0.7
amd ryzen_7_4700ge_firmwarev < renoirpi-fp6_1.0.0.7renoirpi-fp6_1.0.0.7
amd ryzen_5_4600g_firmwarev < renoirpi-fp6_1.0.0.7renoirpi-fp6_1.0.0.7
amd ryzen_5_4600ge_firmwarev < renoirpi-fp6_1.0.0.7renoirpi-fp6_1.0.0.7
amd ryzen_3_4300g_firmwarev < renoirpi-fp6_1.0.0.7renoirpi-fp6_1.0.0.7
amd ryzen_3_4300ge_firmwarev < renoirpi-fp6_1.0.0.7renoirpi-fp6_1.0.0.7

Sürümünüzü kontrol edin

Ürünü seçin ve kullandığınız sürümü yazın; sürümün etkilenen aralıkta olup olmadığını görün.

Intelligence 360 paketinde

Attack Surface Management

Alan adlarınıza bağlı varlıkları, bu varlıklarda çalışan teknolojileri ve bilinen zafiyetleri tek listede görün.

CVE-2023-20558 · Amd Ryzen 7 5700g Firmware · Dark Radar