CVE-2022-23821: vulnerability in AMD Ryzen™ 5000 Series Processors with Radeon™…
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
No sign of exploitation. No public exploitation artifact known so far.
A security flaw in System Management Mode allows attackers to write malicious code to a computer's firmware storage, potentially taking complete control of the system. This happens because access controls in a low-level part of the operating system are not properly enforced.
An improper access control vulnerability in SMM allows an attacker with local or physical access to write arbitrary data to SPI ROM (firmware storage), potentially leading to arbitrary code execution at the highest privilege level. The vulnerability stems from insufficient validation of write operations to persistent memory regions accessible during SMM execution.
In the same product, most dangerous first.