8.2
CVSS 3.1
Няма данни
Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)
Няма потвърждение
Атакува се
Няма данни
Време до експлоатация
Атакува се локално, без особени условия, с администраторски права и без действие от потребителя.
- Експлоатация: няма данни за експлоатация
- Атаката не може да се автоматизира
Описание
Оригинално описание
A potential weakness in AMD SPI protection features may allow a malicious attacker with Ring0 (kernel mode) access to bypass the native System Management Mode (SMM) ROM protections.
Засегнати продукти
- AMD AMD Ryzen™ Threadripper™ PRO Processors 5900 WX-Series: various
- AMD AMD Ryzen™ 6000 Series Mobile Processors and Workstations: various
- AMD AMD Ryzen™ 7000 Series Desktop Processors: various
- AMD AMD Ryzen™ 5000 Series Mobile Processors: various
- AMD AMD Ryzen™ 5000 Series Desktop Processors: various
- AMD AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics: various
- AMD AMD Ryzen™ 3000 Series Desktop Processors: various
- AMD AMD Ryzen™ 4000 Series Desktop Processors with Radeon™ Graphics: various
- AMD AMD Ryzen™ 4000 Series Mobile Processors: various
- AMD AMD Ryzen™ 3000 Series Mobile Processor / 2nd Gen AMD Ryzen™ Mobile Processor with Radeon™ Graphics: various
- AMD AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics: various
- AMD AMD Ryzen™ Threadripper™ PRO Processor: various
- AMD 1st Gen AMD EPYC™ Processors: various
- AMD 2nd Gen AMD EPYC™ Processors: various
- AMD 3rd Gen AMD EPYC™ Processors: various
- AMD AMD EPYC™ Embedded 3000: various
- AMD AMD EPYC (TM) Embedded 7002: various
- AMD AMD EPYC™ Embedded 7003: various
- AMD AMD RyzenTM Embedded R1000: various
- AMD AMD RyzenTM Embedded R2000: various
- AMD AMD RyzenTM Embedded 5000: various
- AMD AMD RyzenTM Embedded V1000: various
- AMD AMD RyzenTM Embedded V2000: various
- AMD AMD RyzenTM Embedded V3000: various
- amd ryzen_threadripper_pro_5995wx: всички версии
- amd ryzen_6980hx: всички версии
Вид слабост
История
- 18 юни 2024 Публикувано