CVSS 3.1
8.8 highCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HCVE-2023-20558
High (8.8) in amd. EPSS 0.7% chance of exploitation in the next 30 days.
Insufficient control flow management in AmdCpmOemSmm may allow a privileged attacker to tamper with the SMM handler potentially leading to an escalation of privileges.
Severity
- EPSS
- 0.7% chance of exploitation in the next 30 days; higher than 51% of CVEs (scores of 2026-10-31)
- CWE
- CWE-670
- Published
- Modified
- Record from
- the NVD, synced
Affected
- amd:athlon_gold_3150u_firmware
- amd:athlon_silver_3050u_firmware
- amd:ryzen_3_2200u_firmware
- amd:ryzen_3_2300u_firmware
- amd:ryzen_3_3200u_firmware
- amd:ryzen_3_3250u_firmware
- amd:ryzen_3_3300u_firmware
- amd:ryzen_3_3300x_firmware
- amd:ryzen_3_3350u_firmware
- amd:ryzen_3_3450u_firmware
- amd:ryzen_3_3500c_firmware
- amd:ryzen_3_3500u_firmware
- amd:ryzen_3_3550h_firmware
- amd:ryzen_3_3580u_firmware
- amd:ryzen_3_3700c_firmware
- amd:ryzen_3_3700u_firmware
- amd:ryzen_3_3750h_firmware
- amd:ryzen_3_3780u_firmware
- amd:ryzen_3_4300g_firmware
- amd:ryzen_3_4300ge_firmware
- amd:ryzen_3_5125c_firmware
- amd:ryzen_3_5300g_firmware
- amd:ryzen_3_5300ge_firmware
- amd:ryzen_3_5400u_firmware
- amd:ryzen_3_5425c_firmware
- amd:ryzen_3_5425u_firmware
- amd:ryzen_5_2500u_firmware
- amd:ryzen_5_2600_firmware
- amd:ryzen_5_2600h_firmware
- amd:ryzen_5_2600x_firmware
- amd:ryzen_5_2700_firmware
- amd:ryzen_5_2700x_firmware
- amd:ryzen_5_3500_firmware
- amd:ryzen_5_3500x_firmware
- amd:ryzen_5_3600_firmware
- amd:ryzen_5_3600x_firmware
- amd:ryzen_5_3600xt_firmware
- amd:ryzen_5_4600g_firmware
- amd:ryzen_5_4600ge_firmware
- amd:ryzen_5_5560u_firmware
- amd:ryzen_5_5600g_firmware
- amd:ryzen_5_5600ge_firmware
- amd:ryzen_5_5600h_firmware
- amd:ryzen_5_5600hs_firmware
- amd:ryzen_5_5600u_firmware
- amd:ryzen_5_5625c_firmware
- amd:ryzen_5_5625u_firmware
- amd:ryzen_7_2700_firmware
- amd:ryzen_7_2700u_firmware
- amd:ryzen_7_2700x_firmware