Description (CNA)
SMM callout vulnerability within the AmdPlatformRasSspSmm driver could allow a ring 0 attacker to modify boot services handlers, potentially resulting in arbitrary code execution.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| AMD / AMD EPYC™ 7002 Processors | unaffected Rome PI 1.0.0.K |
| AMD / AMD Ryzen™ Threadripper™ PRO 3000WX Series Processors | unaffected ChagallWSPI-sWRX8 1.0.0.9 |
| AMD / AMD Ryzen™ Threadripper™ PRO 3000WX Series Processors | unaffected CastlePeakWSPI-sWRX8 1.0.0.E |
| AMD / AMD Ryzen™ Threadripper™ PRO 5000WX- Series Desktop Processors | unaffected ChagallWSPI-sWRX8 1.0.0.9 |
| AMD / AMD Ryzen™ Threadripper™ PRO 7000 WX-Series Processors | unaffected StormPeakPI-SP6 1.1.0.0h |
| AMD / AMD Ryzen™ Threadripper™ PRO 7000 WX-Series Processors | unaffected StormPeakPI-SP6 1.0.0.1j |
| AMD / AMD EPYC™ Embedded 7002 Processors | unaffected EmbRomePI-SP3 1.0.0.D |
CWE
CWE-250
References
ADP enrichment
No English description supplied.
No references supplied.