Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 5

Export CSV
CVE-2023-20555

hw: AMD: SMM Memory Corruption Vulnerability

Insufficient input validation in CpmDisplayFeatureSmm may allow an attacker to corrupt SMM memory by overwriting an arbitrary bit in an attacker-controlled pointer potentially leading to arbitrary code execution in SMM.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Amd
Products
Athlon 3000g Athlon 3015ce Athlon 3015ce Firmware and 240 more
CVE-2023-20579

hw: amd: SPI bypass

Improper Access Control in the AMD SPI protection feature may allow a user with Ring0 (kernel mode) privileged access to bypass protections potentially resulting in loss of integrity and availability.

CVSS 3.1 · 4.4 Medium EPSS < 1% KEV · Not listed
Vendors
Amd
Products
Ryzen 3 3200u Ryzen 3 3200u Firmware Ryzen 3 3250c and 255 more
CVE-2023-20589

fTPM Voltage Fault Injection

An attacker with specialized hardware and physical access to an impacted device may be able to perform a voltage fault injection attack resulting in compromise of the ASP secure boot potentially leading to arbitrary code execution. 

CVSS 3.1 · 6.8 Medium EPSS < 1% KEV · Not listed
Vendors
Amd
Products
4700s 4700s Firmware Athlon Gold 3150c and 241 more