CVE-2022-23821
- State
- Published
- Severity
- Not scored
- Published
- Nov 14, 2023
- Updated
- Dec 3, 2024
- Reserved
- Jan 21, 2022
Description
Improper access control in System Management Mode (SMM) may allow an attacker to write to SPI ROM potentially leading to arbitrary code execution.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
Ryzen™ 3000 Series Desktop Processors “Matisse”AMD |
|
Ryzen™ 5000 Series Desktop Processors “Vermeer”AMD |
|
Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics “Cezanne”AMD |
|
Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics “Picasso” AM4AMD |
|
Ryzen™ Threadripper™ 2000 Series Processors “Colfax”AMD |
|
Ryzen™ Threadripper™ 3000 Series Processors “Castle Peak” HEDTAMD |
|
Ryzen™ Threadripper™ PRO Processors “Castle Peak” WS SP3AMD |
|
Ryzen™ Threadripper™ PRO 3000WX Series Processors “Chagall” WSAMD |
|
Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Dali”/”Dali” FP5AMD |
|
Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Pollock”AMD |
|
Ryzen™ 3000 Series Mobile Processor with Radeon™ Graphics “Picasso” FP5AMD |
|
Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics “Renoir” FP6AMD |
|
Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Lucienne”AMD |
|
Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics “Picasso” AM4AMD |
|
Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Cezanne”AMD |
|
AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics "Rembrandt"AMD |
|
AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics “Rembrandt-R”AMD |
|
AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics “Barcelo”AMD |
|
AMD Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphics “Barcelo-R”AMD |
|
AMD Ryzen™ Embedded R1000AMD |
|
AMD Ryzen™ Embedded R2000AMD |
|
AMD Ryzen™ Embedded 5000AMD |
|
AMD Ryzen™ Embedded V1000AMD |
|
AMD Ryzen™ Embedded V2000AMD |
|
AMD Ryzen™ Embedded V3000AMD |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.