Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CVE-2022-23821

EPSS 0.43% · P62
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2022-23821

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Improper access control in System Management Mode (SMM) may allow an attacker to write to SPI ROM potentially leading to arbitrary code execution.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
AMD System Management Mode 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
AMD System Management Mode是美国超威半导体(AMD)公司的系统管理模式。一种CPU的执行模式。 AMD System Management Mode存在安全漏洞,该漏洞源于系统管理模式(SMM)中的不当访问控制可能允许攻击者写入 SPI ROM,从而可能导致任意代码执行。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
AMDRyzen™ 3000 Series Desktop Processors “Matisse” various -
AMDRyzen™ 5000 Series Desktop Processors “Vermeer” various -
AMDRyzen™ 5000 Series Desktop Processor with Radeon™ Graphics “Cezanne” various -
AMDAthlon™ 3000 Series Desktop Processors with Radeon™ Graphics “Picasso” AM4 various -
AMDRyzen™ Threadripper™ 2000 Series Processors “Colfax” various -
AMDRyzen™ Threadripper™ 3000 Series Processors “Castle Peak” HEDT various -
AMDRyzen™ Threadripper™ PRO Processors “Castle Peak” WS SP3 various -
AMDRyzen™ Threadripper™ PRO 3000WX Series Processors “Chagall” WS various -
AMDAthlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Dali”/”Dali” FP5 various -
AMDAthlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Pollock” various -
AMDRyzen™ 3000 Series Mobile Processor with Radeon™ Graphics “Picasso” FP5 various -
AMDRyzen™ 4000 Series Mobile Processors with Radeon™ Graphics “Renoir” FP6 various -
AMDRyzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Lucienne” various -
AMDAthlon™ 3000 Series Desktop Processors with Radeon™ Graphics “Picasso” AM4 various -
AMDRyzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Cezanne” various -
AMDAMD Ryzen™ 6000 Series Processors with Radeon™ Graphics "Rembrandt" various -
AMDAMD Ryzen™ 7035 Series Processors with Radeon™ Graphics “Rembrandt-R” various -
AMDAMD Ryzen™ 5000 Series Processors with Radeon™ Graphics “Barcelo” various -
AMDAMD Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphics “Barcelo-R” various -
AMDAMD Ryzen™ Embedded R1000 various -
AMDAMD Ryzen™ Embedded R2000 various -
AMDAMD Ryzen™ Embedded 5000 various -
AMDAMD Ryzen™ Embedded V1000 various -
AMDAMD Ryzen™ Embedded V2000 various -
AMDAMD Ryzen™ Embedded V3000 various -

II. Public POCs for CVE-2022-23821

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2022-23821

登录查看更多情报信息。

Same Patch Batch · AMD · 2023-11-14 · 20 CVEs total

CVE-2022-238207.5 HIGHAMD EPYC 安全漏洞
CVE-2021-467746.7 MEDIUMAMD EPYC 安全漏洞
CVE-2023-205336.1 MEDIUMAMD EPYC 安全漏洞
CVE-2023-205665.3 MEDIUMAMD EPYC 安全漏洞
CVE-2023-205213.3 LOWAMD EPYC 安全漏洞
CVE-2021-467662.5 LOWAMD EPYC 安全漏洞
CVE-2021-263451.9 LOWAMD EPYC 缓冲区错误漏洞
CVE-2022-238301.9 LOWAMD EPYC 安全漏洞
CVE-2023-205261.9 LOWAMD EPYC 安全漏洞
CVE-2023-20596AMD Ryzen 安全漏洞
CVE-2023-20592AMD CPU 安全漏洞
CVE-2023-20571AMD CPU 安全漏洞
CVE-2023-20568AMD Graphics Driver 安全漏洞
CVE-2023-20567AMD Graphics Driver 安全漏洞
CVE-2023-20565AMD CPU 安全漏洞
CVE-2023-20563AMD CPU 安全漏洞
CVE-2023-20519AMD EPYC 资源管理错误漏洞
CVE-2021-46758AMD Secure Processor 安全漏洞
CVE-2021-46748AMD Secure Processor 安全漏洞

IV. Related Vulnerabilities

V. Comments for CVE-2022-23821

No comments yet


Leave a comment