CVE-2023-20596

CRITICAL

AMD Ryzen SMM Supervisor - Ring0 Code Execution

Title source: manual
STIX 2.1

Description

Improper input validation in the SMM Supervisor may allow an attacker with a compromised SMI handler to gain Ring0 access potentially leading to arbitrary code execution.

References (1)

Core 1
Core References

Scores

CVSS v3 9.8
EPSS 0.0039
EPSS Percentile 60.1%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

Status published
Products (50)
amd/ryzen_3_5125c_firmware < cezannepi-fp6_1.0.0.fa
amd/ryzen_3_5300g_firmware < comboam4v2_1.2.0.b
amd/ryzen_3_5300ge_firmware < comboam4v2_1.2.0.b
amd/ryzen_3_5400u_firmware < cezannepi-fp6_1.0.0.fa
amd/ryzen_3_5425u_firmware < cezannepi-fp6_1.0.0.fa
amd/ryzen_3_7335u_firmware < rembrandtpi-fp7_1.0.0.9b
amd/ryzen_3_7440u_firmware < phoenixpi-fp8-fp7_1.0.0.2
amd/ryzen_5_5500h_firmware < cezannepi-fp6_1.0.0.fa
amd/ryzen_5_5560u_firmware < cezannepi-fp6_1.0.0.fa
amd/ryzen_5_5600g_firmware < comboam4v2_1.2.0.b
... and 40 more
Published Nov 14, 2023
Tracked Since Feb 18, 2026