Description (CNA)
A potential vulnerability in AMD System Management Mode (SMM) interrupt handler may allow an attacker with high privileges to access the SMM resulting in arbitrary code execution which could be used by malicious actors to bypass security mechanisms provided in the UEFI firmware.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| AMD / 2nd Gen EPYC | affected Various |
| AMD / 3rd Gen EPYC | affected various |
| AMD / Ryzen 2000 Series | affected various |
| AMD / Ryzen 3000 Series | affected Various |
| AMD / Ryzen 5000 Series | affected various |
CWE
No CWE identifiers supplied.
References
- https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032
- https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1027
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.