Към съдържанието
Търсене

CVE-2023-31315: AMD 3rd Gen AMD EPYC™ Processors, инжекция

7.5

CVSS 3.1

Няма данни

Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)

Няма потвърждение

Атакува се

Няма данни

Време до експлоатация

Атакува се локално, при специфични условия, с администраторски права и без действие от потребителя.

CVE радар: още уязвимости от този вид

  • Експлоатация: няма данни за експлоатация
  • Атаката не може да се автоматизира

Описание

Оригинално описание

Improper validation in a model specific register (MSR) could allow a malicious program with ring0 access to modify SMM configuration while SMI lock is enabled, potentially leading to arbitrary code execution.

Засегнати продукти

  • AMD 3rd Gen AMD EPYC™ Processors: various преди Milan PI 1.0.0.D
  • AMD 1st Gen AMD EPYC™ Processors: various преди Naples PI 1.0.0.M
  • AMD 2nd Gen AMD EPYC™ Processors: various преди Rome PI 1.0.0.J
  • AMD 4th Gen AMD EPYC™ Processors: various преди Genoa PI 1.0.0.C
  • AMD AMD EPYC™ Embedded 3000: various
  • AMD AMD EPYC™ Embedded 7002: various
  • AMD AMD EPYC™ Embedded 7003: various
  • AMD AMD EPYC™ Embedded 9003: various преди EmbGenoaPI 1.0.0.7
  • AMD AMD Ryzen™ Embedded R1000: various
  • AMD AMD Ryzen™ Embedded R2000: various
  • AMD AMD Ryzen™ Embedded 5000: various
  • AMD AMD Ryzen™ Embedded 7000: various
  • AMD AMD Ryzen™ Embedded V1000: various
  • AMD AMD Ryzen™ Embedded V2000: various
  • AMD AMD Ryzen™ Embedded V3000: various
  • AMD AMD Ryzen™ 3000 Series Desktop Processors: various
  • AMD AMD Ryzen™ 5000 Series Desktop Processors: various преди ComboAM4v2PI 1.2.0.cb
  • AMD AMD Ryzen™ 5000 Series Desktop processor with Radeon™ Graphics: various преди ComboAM4v2PI 1.2.0.cb
  • AMD AMD Ryzen™ 7000 Series Desktop Processors: various преди ComboAM5PI 1.2.0.1
  • AMD AMD Ryzen™ 4000 Series Desktop Processors with Radeon™ Graphics: various преди ComboAM4v2PI 1.2.0.cb
  • AMD AMD Ryzen™ Threadripper™ 3000 Series Processors: various преди CastlePeakPI-SP3r3 1.0.0.B
  • AMD AMD Ryzen™ Threadripper™ PRO Processors: various преди ChagallWSPI-sWRX8 1.0.0.8; various преди CastlePeakWSPI-sWRX8 1.0.0.D
  • AMD AMD Ryzen™ Threadripper™ PRO 3000WX Series Processors: various преди ChagallWSPI-sWRX8 1.0.0.8
  • AMD AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics: various преди Picasso-FP5 1.0.1.2; various преди PollockPI-FT5 1.0.0.8
  • AMD AMD Ryzen™ 3000 Series Mobile Processor with Radeon™ Graphics: various преди Picasso-FP5 1.0.1.2
  • AMD AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics: various преди RenoirPI-FP6 1.0.0.E
  • AMD AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics: various преди CezannePI-FP6 1.0.1.1
  • AMD AMD Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphics: various преди CezannePI-FP6
  • AMD AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics: various преди PhoenixPI-FP8-FP7 1.1.0.3
  • AMD AMD Ryzen™ 7045 Series Mobile Processors: various преди DragonRangeFL1 1.0.0.3e
  • AMD AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics: various преди RembrandtPI-FP7 1.0.0.B
  • AMD AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics: various преди MendocinoPI-FT6 1.0.0.7
  • AMD AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics: various преди RembrandtPI-FP7 1.0.0.B
  • AMD AMD Ryzen™ 8000 Series Processors with Radeon™ Graphics: various преди ComboAM5PI 1.2.0.1
  • amd: още 34 продукта, добавени от amd

    1st_gen_amd_epyc_processors, 3rd_gen_amd_epyc_processors, 2nd_gen_amd_epyc_processors, ryzen_3000_series_desktop_processors, 4th_gen_amd_epyc_processors, epyc_embedded_3000, epyc_embedded_7002, epyc_embedded_7003, epyc_embedded_9003, ryzen_embedded_r1000, ryzen_embedded_r2000, ryzen_embedded_7000, ryzen_embedded_5000, ryzen_embedded_v1000, ryzen_embedded_v3000, ryzen_embedded_v2000, ryzen_7040_series_mobile_processors_with_radeon_graphics, ryzen_5000_series_desktop_processors, ryzen_5000_series_desktop_processors_with_radeon_graphics, ryzen_7000_desktop_processors, ryzen_4000_series_desktop_processors_with_radeon_graphics, ryzen_threadripper_3000_series_processors, ryzen_threadripper_pro_processors, ryzen_threadripper_pro_3000wx_series_processors, athlon_3000_series_mobile_processors_with_radeon_graphics, ryzen_3000_series_desktop_processors_with_radeon_graphics, ryzen_4000_series_mobile_processors_with_radeon_graphics, ryzen_5000_series_mobile_processors_with_radeon_graphics, ryzen_7030_series-mobile_processors_with_radeon_graphics, ryzen_7045_series_mobile_processors, ryzen_6000_processors_with_radeongraphics, ryzen_7020_processors_with_radeongraphics, ryzen_7035_processors_with_radeongraphics, ryzen_8000_series_processors_with_radeongraphics

Вид слабост

История

  • 9 август 2024 Публикувано

Други уязвимости в AMD 3rd Gen AMD EPYC™ Processors

Първоизточници

CVE-2023-31315: AMD 3rd Gen AMD EPYC™ Processors, инжекция | freedomonline.bg