CVE-2023-20558
High
Description
Insufficient control flow management in AmdCpmOemSmm may allow a privileged attacker to tamper with the SMM handler potentially leading to an escalation of privileges.
SeverityHigh
CVSS8.8
Exploit probability—
ProductAmd Ryzen 7 5700g Firmware
PublishedApr 2, 2023
First seenApr 2, 2023
Weakness typeCWE-670CWE-670
How to fix
Update
- amd ryzen_7_5700g_firmwarecomboam4_v2_pi_1.2.0.6c or later
- amd ryzen_7_5700ge_firmwarecomboam4_v2_pi_1.2.0.6c or later
- amd ryzen_5_5600g_firmwarecomboam4_v2_pi_1.2.0.6c or later
- amd ryzen_5_5600ge_firmwarecomboam4_v2_pi_1.2.0.6c or later
- amd ryzen_3_5300g_firmwarecomboam4_v2_pi_1.2.0.6c or later
- amd ryzen_3_5300ge_firmwarecomboam4_v2_pi_1.2.0.6c or later
- amd ryzen_9_5980hx_firmwarecezannepi-fp6_1.0.0.9 or later
- amd ryzen_9_5980hs_firmwarecezannepi-fp6_1.0.0.9 or later
- amd ryzen_7_5825u_firmwarecezannepi-fp6_1.0.0.9 or later
- amd ryzen_9_5900hx_firmwarecezannepi-fp6_1.0.0.9 or later
- amd ryzen_9_5900hs_firmwarecezannepi-fp6_1.0.0.9 or later
- amd ryzen_7_5825c_firmwarecezannepi-fp6_1.0.0.9 or later
Vendor advisories
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| amd ryzen_7_5700g_firmware | v < comboam4_v2_pi_1.2.0.6c | comboam4_v2_pi_1.2.0.6c |
| amd ryzen_7_5700ge_firmware | v < comboam4_v2_pi_1.2.0.6c | comboam4_v2_pi_1.2.0.6c |
| amd ryzen_5_5600g_firmware | v < comboam4_v2_pi_1.2.0.6c | comboam4_v2_pi_1.2.0.6c |
| amd ryzen_5_5600ge_firmware | v < comboam4_v2_pi_1.2.0.6c | comboam4_v2_pi_1.2.0.6c |
| amd ryzen_3_5300g_firmware | v < comboam4_v2_pi_1.2.0.6c | comboam4_v2_pi_1.2.0.6c |
| amd ryzen_3_5300ge_firmware | v < comboam4_v2_pi_1.2.0.6c | comboam4_v2_pi_1.2.0.6c |
| amd ryzen_9_5980hx_firmware | v < cezannepi-fp6_1.0.0.9 | cezannepi-fp6_1.0.0.9 |
| amd ryzen_9_5980hs_firmware | v < cezannepi-fp6_1.0.0.9 | cezannepi-fp6_1.0.0.9 |
| amd ryzen_7_5825u_firmware | v < cezannepi-fp6_1.0.0.9 | cezannepi-fp6_1.0.0.9 |
| amd ryzen_9_5900hx_firmware | v < cezannepi-fp6_1.0.0.9 | cezannepi-fp6_1.0.0.9 |
| amd ryzen_9_5900hs_firmware | v < cezannepi-fp6_1.0.0.9 | cezannepi-fp6_1.0.0.9 |
| amd ryzen_7_5825c_firmware | v < cezannepi-fp6_1.0.0.9 | cezannepi-fp6_1.0.0.9 |
| amd ryzen_7_5800h_firmware | v < cezannepi-fp6_1.0.0.9 | cezannepi-fp6_1.0.0.9 |
| amd ryzen_5_5625u_firmware | v < cezannepi-fp6_1.0.0.9 | cezannepi-fp6_1.0.0.9 |
| amd ryzen_7_5800hs_firmware | v < cezannepi-fp6_1.0.0.9 | cezannepi-fp6_1.0.0.9 |
| amd ryzen_5_5625c_firmware | v < cezannepi-fp6_1.0.0.9 | cezannepi-fp6_1.0.0.9 |
| amd ryzen_5_5600h_firmware | v < cezannepi-fp6_1.0.0.9 | cezannepi-fp6_1.0.0.9 |
| amd ryzen_5_5600hs_firmware | v < cezannepi-fp6_1.0.0.9 | cezannepi-fp6_1.0.0.9 |
| amd ryzen_7_5800u_firmware | v < cezannepi-fp6_1.0.0.9 | cezannepi-fp6_1.0.0.9 |
| amd ryzen_5_5600u_firmware | v < cezannepi-fp6_1.0.0.9 | cezannepi-fp6_1.0.0.9 |
| amd ryzen_5_5560u_firmware | v < cezannepi-fp6_1.0.0.9 | cezannepi-fp6_1.0.0.9 |
| amd ryzen_3_5425u_firmware | v < cezannepi-fp6_1.0.0.9 | cezannepi-fp6_1.0.0.9 |
| amd ryzen_3_5425c_firmware | v < cezannepi-fp6_1.0.0.9 | cezannepi-fp6_1.0.0.9 |
| amd ryzen_3_5400u_firmware | v < cezannepi-fp6_1.0.0.9 | cezannepi-fp6_1.0.0.9 |
| amd ryzen_3_5125c_firmware | v < cezannepi-fp6_1.0.0.9 | cezannepi-fp6_1.0.0.9 |
| amd athlon_silver_3050u_firmware | No range specified | — |
| amd athlon_gold_3150u_firmware | No range specified | — |
| amd ryzen_3_3200u_firmware | No range specified | — |
| amd ryzen_3_3250u_firmware | No range specified | — |
| amd ryzen_3_3300u_firmware | No range specified | — |
| amd ryzen_3_3350u_firmware | No range specified | — |
| amd ryzen_3_3450u_firmware | No range specified | — |
| amd ryzen_3_3500u_firmware | No range specified | — |
| amd ryzen_3_3500c_firmware | No range specified | — |
| amd ryzen_3_3550h_firmware | No range specified | — |
| amd ryzen_3_3580u_firmware | No range specified | — |
| amd ryzen_3_3700u_firmware | No range specified | — |
| amd ryzen_3_3700c_firmware | No range specified | — |
| amd ryzen_3_3750h_firmware | No range specified | — |
| amd ryzen_3_3780u_firmware | No range specified | — |
| amd ryzen_3_2200u_firmware | v < comboam4v2_pi_1.2.0.6c | comboam4v2_pi_1.2.0.6c |
| amd ryzen_3_2300u_firmware | v < comboam4v2_pi_1.2.0.6c | comboam4v2_pi_1.2.0.6c |
| amd ryzen_5_2500u_firmware | v < comboam4v2_pi_1.2.0.6c | comboam4v2_pi_1.2.0.6c |
| amd ryzen_5_2600_firmware | v < comboam4v2_pi_1.2.0.6c | comboam4v2_pi_1.2.0.6c |
| amd ryzen_5_2600h_firmware | v < comboam4v2_pi_1.2.0.6c | comboam4v2_pi_1.2.0.6c |
| amd ryzen_5_2600x_firmware | v < comboam4v2_pi_1.2.0.6c | comboam4v2_pi_1.2.0.6c |
| amd ryzen_5_2700_firmware | v < comboam4v2_pi_1.2.0.6c | comboam4v2_pi_1.2.0.6c |
| amd ryzen_5_2700x_firmware | v < comboam4v2_pi_1.2.0.6c | comboam4v2_pi_1.2.0.6c |
| amd ryzen_7_2700_firmware | v < comboam4v2_pi_1.2.0.6c | comboam4v2_pi_1.2.0.6c |
| amd ryzen_7_2700u_firmware | v < comboam4v2_pi_1.2.0.6c | comboam4v2_pi_1.2.0.6c |
| amd ryzen_7_2700x_firmware | v < comboam4v2_pi_1.2.0.6c | comboam4v2_pi_1.2.0.6c |
| amd ryzen_7_2800h_firmware | v < comboam4v2_pi_1.2.0.6c | comboam4v2_pi_1.2.0.6c |
| amd ryzen_3_3300x_firmware | v < comboam4_v2_pi_1.2.0.6c | comboam4_v2_pi_1.2.0.6c |
| amd ryzen_5_3500_firmware | v < comboam4_v2_pi_1.2.0.6c | comboam4_v2_pi_1.2.0.6c |
| amd ryzen_5_3500x_firmware | v < comboam4_v2_pi_1.2.0.6c | comboam4_v2_pi_1.2.0.6c |
| amd ryzen_5_3600_firmware | v < comboam4_v2_pi_1.2.0.6c | comboam4_v2_pi_1.2.0.6c |
| amd ryzen_5_3600x_firmware | v < comboam4_v2_pi_1.2.0.6c | comboam4_v2_pi_1.2.0.6c |
| amd ryzen_5_3600xt_firmware | v < comboam4_v2_pi_1.2.0.6c | comboam4_v2_pi_1.2.0.6c |
| amd ryzen_7_3700x_firmware | v < comboam4_v2_pi_1.2.0.6c | comboam4_v2_pi_1.2.0.6c |
| amd ryzen_7_3800x_firmware | v < comboam4_v2_pi_1.2.0.6c | comboam4_v2_pi_1.2.0.6c |
| amd ryzen_7_3800xt_firmware | v < comboam4_v2_pi_1.2.0.6c | comboam4_v2_pi_1.2.0.6c |
| amd ryzen_9_3900_firmware | v < comboam4_v2_pi_1.2.0.6c | comboam4_v2_pi_1.2.0.6c |
| amd ryzen_9_3900x_firmware | v < comboam4_v2_pi_1.2.0.6c | comboam4_v2_pi_1.2.0.6c |
| amd ryzen_9_3900xt_firmware | v < comboam4_v2_pi_1.2.0.6c | comboam4_v2_pi_1.2.0.6c |
| amd ryzen_9_3950x_firmware | v < comboam4_v2_pi_1.2.0.6c | comboam4_v2_pi_1.2.0.6c |
| amd ryzen_9_pro_3900_firmware | v < comboam4_v2_pi_1.2.0.6c | comboam4_v2_pi_1.2.0.6c |
| amd ryzen_threadripper_2990wx_firmware | v < summitpi-sp3r2_1.1.0.5 | summitpi-sp3r2_1.1.0.5 |
| amd ryzen_threadripper_2970wx_firmware | v < summitpi-sp3r2_1.1.0.5 | summitpi-sp3r2_1.1.0.5 |
| amd ryzen_threadripper_2950x_firmware | v < summitpi-sp3r2_1.1.0.5 | summitpi-sp3r2_1.1.0.5 |
| amd ryzen_threadripper_2920x_firmware | v < summitpi-sp3r2_1.1.0.5 | summitpi-sp3r2_1.1.0.5 |
| amd ryzen_threadripper_3990x_firmware | v < castlepeakpi-sp3r3_1.0.0.6 | castlepeakpi-sp3r3_1.0.0.6 |
| amd ryzen_threadripper_3970x_firmware | v < castlepeakpi-sp3r3_1.0.0.6 | castlepeakpi-sp3r3_1.0.0.6 |
| amd ryzen_threadripper_3960x_firmware | v < castlepeakpi-sp3r3_1.0.0.6 | castlepeakpi-sp3r3_1.0.0.6 |
| amd ryzen_threadripper_pro_3795wx_firmware | v < castlepeakwspi-swrx8_1.0.0.9 | castlepeakwspi-swrx8_1.0.0.9 |
| amd ryzen_threadripper_pro_3945wx_firmware | v < castlepeakwspi-swrx8_1.0.0.9 | castlepeakwspi-swrx8_1.0.0.9 |
| amd ryzen_threadripper_pro_3955wx_firmware | v < castlepeakwspi-swrx8_1.0.0.9 | castlepeakwspi-swrx8_1.0.0.9 |
| amd ryzen_threadripper_pro_3975wx_firmware | v < castlepeakwspi-swrx8_1.0.0.9 | castlepeakwspi-swrx8_1.0.0.9 |
| amd ryzen_threadripper_pro_3995wx_firmware | v < castlepeakwspi-swrx8_1.0.0.9 | castlepeakwspi-swrx8_1.0.0.9 |
| amd ryzen_threadripper_pro_5945wx_firmware | v < castlepeakwspi-swrx8_1.0.0.9 | castlepeakwspi-swrx8_1.0.0.9 |
| amd ryzen_threadripper_pro_5955wx_firmware | v < castlepeakwspi-swrx8_1.0.0.9 | castlepeakwspi-swrx8_1.0.0.9 |
| amd ryzen_threadripper_pro_5965wx_firmware | v < castlepeakwspi-swrx8_1.0.0.9 | castlepeakwspi-swrx8_1.0.0.9 |
| amd ryzen_threadripper_pro_5975wx_firmware | v < castlepeakwspi-swrx8_1.0.0.9 | castlepeakwspi-swrx8_1.0.0.9 |
| amd ryzen_threadripper_pro_5995wx_firmware | v < castlepeakwspi-swrx8_1.0.0.9 | castlepeakwspi-swrx8_1.0.0.9 |
| amd ryzen_7_4700g_firmware | v < renoirpi-fp6_1.0.0.7 | renoirpi-fp6_1.0.0.7 |
| amd ryzen_7_4700ge_firmware | v < renoirpi-fp6_1.0.0.7 | renoirpi-fp6_1.0.0.7 |
| amd ryzen_5_4600g_firmware | v < renoirpi-fp6_1.0.0.7 | renoirpi-fp6_1.0.0.7 |
| amd ryzen_5_4600ge_firmware | v < renoirpi-fp6_1.0.0.7 | renoirpi-fp6_1.0.0.7 |
| amd ryzen_3_4300g_firmware | v < renoirpi-fp6_1.0.0.7 | renoirpi-fp6_1.0.0.7 |
| amd ryzen_3_4300ge_firmware | v < renoirpi-fp6_1.0.0.7 | renoirpi-fp6_1.0.0.7 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.