Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CVE-2022-23817

CVSS 7.0 · High EPSS 0.10% · P27
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2022-23817

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Insufficient checking of memory buffer in ASP Secure OS may allow an attacker with a malicious TA to read/write to the ASP Secure OS kernel virtual address space, potentially leading to privilege escalation.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
AMD Secure Processor 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
AMD Secure Processor(ASP)是美国超威半导体(AMD)公司的一款独立的 ARM Coretex-A5 芯片。 AMD Secure Processor(ASP)存在安全漏洞,该漏洞源于内存缓冲区检查不足,可能允许攻击者读取/写入ASP Secure OS内核虚拟地址空间,从而导致权限提升。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
AMDAMD Ryzen™ 3000 Series Desktop Processors ComboAM4V1 1.0.0.A/ComboAM4V2 1.2.0.9 -
AMDAMD Ryzen™ 5000 Series Desktop Processors ComboAM4v2 PI 1.2.0.8 -
AMDAMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics ComboAM4v2 PI 1.2.0.8 -
AMDAMD Ryzen™ 7000 Series Desktop Processors ComboAM5 1.0.8.0 -
AMDAMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics ComboAM4PI 1.0.0.9 -
AMDAMD Ryzen™ 4000 Series Desktop Processors with Radeon™ Graphics ComboAM4v2 PI 1.2.0.8 -
AMDAMD Ryzen™ Threadripper™ 3000 Series Processors CastlePeakPI-SP3r3 1.0.0.8 -
AMDAMD Ryzen™ Threadripper™ PRO 3000WX Series Processors ChagallWSPI-sWRX8 1.0.0.5 -
AMDAMD Ryzen™ Threadripper™ PRO 5000WX Processors ChagallWSPI-sWRX8 1.0.0.5 -
AMDAMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics PicassoPI-FP5 1.0.0.E -
AMDAMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics PollockPI-FT5 1.0.0.4 -
AMDAMD Ryzen™ 3000 Series Mobile Processor with Radeon™ Graphics--
AMDAMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics RenoirPI-FP6 1.0.0.A -
AMDAMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics CezannePI-FP6 1.0.0.C -
AMDAMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics CezannePI-FP6 1.0.0.C -
AMDAMD Ryzen™ 6000 Series Processors with Radeon™ Graphics RembrandtPI-FP7 1.0.0.5 -
AMDAMD Ryzen™ 7035 Series Processors with Radeon™ Graphics RembrandtPI-FP7 1.0.0.5 -
AMDAMD Ryzen™ 5000 Series Processors with Radeon™ Graphics CezannePI-FP6 1.0.0.C -
AMDAMD Ryzen™ 3000 Series Processors with Radeon™ Graphics CezannePI-FP6 1.0.0.C -
AMDAMD Ryzen™ 7045 Series Mobile Processors DragonRangeFL1PI 1.0.0.3b -
AMDAMD Ryzen™ Embedded R1000 Series Processors EmbeddedPI-FP5 1.2.0.A -
AMDAMD Ryzen™ Embedded R2000 Series Processors EmbeddedR2KPI-FP5 1.0.0.2 -
AMDAMD Ryzen™ Embedded 5000 Series Processors EmbAM4PI 1.0.0.2 -
AMDAMD Ryzen™ Embedded 7000 Series Processors EmbeddedAM5PI 1.0.0.0 -
AMDAMD Ryzen™ Embedded V1000 Series Processors EmbeddedPI-FP5 1.2.0.A -
AMDAMD Ryzen™ Embedded V2000 Series Processors EmbeddedPI-FP6 1.0.0.8 -
AMDAMD Ryzen™ Embedded V3000 Series Processors EmbeddedPI-FP7r2 1.0.0.2 -

II. Public POCs for CVE-2022-23817

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2022-23817

登录查看更多情报信息。

Same Patch Batch · AMD · 2024-08-13 · 26 CVEs total

CVE-2022-238157.5 HIGHAMD Secure Processor 安全漏洞
CVE-2023-205787.5 HIGHAMD Secure Processor和AMD Secure Encrypted Virtualization 安全漏洞
CVE-2023-313497.3 HIGHAMD μProf 安全漏洞
CVE-2023-313487.3 HIGHAMD μProf 安全漏洞
CVE-2023-313417.3 HIGHAMD μProf 安全漏洞
CVE-2021-263447.2 HIGHAMD Secure Processor 和 AMD Secure Encrypted Virtualization 安全漏洞
CVE-2023-205916.5 MEDIUMAMD Secure Processor和AMD Secure Encrypted Virtualization 安全漏洞
CVE-2021-263675.7 MEDIUMAMD Graphics Driver 安全漏洞
CVE-2024-219815.7 MEDIUMAMD Secure Processor 安全漏洞
CVE-2023-205845.3 MEDIUMAMD Secure Processor和AMD Secure Encrypted Virtualization 安全漏洞
CVE-2023-205095.2 MEDIUMAMD Graphics Driver 安全漏洞
CVE-2021-467465.2 MEDIUMAMD Secure Processor和AMD Secure Encrypted Virtualization 安全漏洞
CVE-2023-313105.0 MEDIUMAMD Graphics Driver 安全漏洞
CVE-2023-313394.8 MEDIUMAMD Zynq UltraScale+ 安全漏洞
CVE-2023-205104.7 MEDIUMAMD Graphics Driver 安全漏洞
CVE-2023-313564.4 MEDIUMAMD Secure Processor和AMD Secure Encrypted Virtualization 安全漏洞
CVE-2021-467723.9 LOWAMD Secure Processor和AMD Secure Encrypted Virtualization 安全漏洞
CVE-2021-263873.9 LOWAMD Secure Processor和AMD Secure Encrypted Virtualization 安全漏洞
CVE-2023-205133.3 LOWAMD Graphics Driver 安全漏洞
CVE-2023-313663.3 LOWAMD μProf 安全漏洞

Showing top 20 of 26 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

V. Comments for CVE-2022-23817

No comments yet


Leave a comment