CVSS 3.1
9.8 criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCVE-2022-23821
Critical (9.8) in amd. EPSS 1.0% chance of exploitation in the next 30 days.
Improper access control in System Management Mode (SMM) may allow an attacker to write to SPI ROM potentially leading to arbitrary code execution.
Severity
- EPSS
- 1.0% chance of exploitation in the next 30 days; higher than 62% of CVEs (scores of 2026-10-31)
- Published
- Modified
- Record from
- the NVD, synced
Affected
- amd:athlon_3015ce_firmware
- amd:athlon_3015e_firmware
- amd:ryzen_3_3100_firmware
- amd:ryzen_3_3200u_firmware
- amd:ryzen_3_3250c_firmware
- amd:ryzen_3_3250u_firmware
- amd:ryzen_3_3300u_firmware
- amd:ryzen_3_3300x_firmware
- amd:ryzen_3_3350u_firmware
- amd:ryzen_3_4300u_firmware
- amd:ryzen_3_5100_firmware
- amd:ryzen_3_5125c_firmware
- amd:ryzen_3_5400u_firmware
- amd:ryzen_3_5425u_firmware
- amd:ryzen_3_7335u_firmware
- amd:ryzen_5_3450u_firmware
- amd:ryzen_5_3500_firmware
- amd:ryzen_5_3500c_firmware
- amd:ryzen_5_3500u_firmware
- amd:ryzen_5_3500x_firmware
- amd:ryzen_5_3550h_firmware
- amd:ryzen_5_3580u_firmware
- amd:ryzen_5_3600_firmware
- amd:ryzen_5_3600x_firmware
- amd:ryzen_5_3600xt_firmware
- amd:ryzen_5_4500u_firmware
- amd:ryzen_5_4600h_firmware
- amd:ryzen_5_4600hs_firmware
- amd:ryzen_5_4600u_firmware
- amd:ryzen_5_4680u_firmware
- amd:ryzen_5_55003xd_firmware
- amd:ryzen_5_5500_firmware
- amd:ryzen_5_5500h_firmware
- amd:ryzen_5_5500x_firmware
- amd:ryzen_5_5560u_firmware
- amd:ryzen_5_56003xd_firmware
- amd:ryzen_5_5600_firmware
- amd:ryzen_5_5600h_firmware
- amd:ryzen_5_5600hs_firmware
- amd:ryzen_5_5600u_firmware
- amd:ryzen_5_5600x_firmware
- amd:ryzen_5_5625u_firmware
- amd:ryzen_5_6600h_firmware
- amd:ryzen_5_6600hs_firmware
- amd:ryzen_5_6600u_firmware
- amd:ryzen_5_7535hs_firmware
- amd:ryzen_5_7535u_firmware
- amd:ryzen_5_pro_3350g_firmware
- amd:ryzen_5_pro_3350ge_firmware
- amd:ryzen_5_pro_3400g_firmware