Description
Insufficient protections in System Management Mode (SMM) code may allow an attacker to potentially enable escalation of privilege via local access.
CVSS breakdown
CVSS 3.1
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Affected products
- AMD / AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics “Barcelo”various – various
- AMD / AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics "Rembrandt"various – various
- AMD / AMD Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphics “Barcelo-R”various – various
- AMD / AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics “Rembrandt-R”various – various
- AMD / AMD Ryzen™ Embedded 5000various – various
- AMD / AMD Ryzen™ Embedded R1000various – various
- AMD / AMD Ryzen™ Embedded R2000various – various
- AMD / AMD Ryzen™Embedded V3000various – various
- AMD / Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics “Cezanne”various – various
- AMD / Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Cezanne”various – various
- AMD / Ryzen™ 7000 Series Desktop Processors “Raphael” XD3various – various
- AMD / Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics “Phoenix” FP7/FP7r2/FP8various – various