CVE-2023-52711CWE-284

Various Issues Due To Exposed SMI Handler in AmdPspP2CmboxV2

High · published May 28, 2024

CVSS v3.1
7.8
EPSS
0%
Percentile
1.5
In the wild
Unconfirmed
What it is

Various Issues Due To Exposed SMI Handler in AmdPspP2CmboxV2. The first issue can be leveraged to bypass the protections that have been put in place by previous UEFI phases to prevent direct access to the SPI flash. The second issue can be used to both leak and corrupt SMM memory thus potentially leading code execution in SMM

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00115 · 1.5th percentile
Weakness
CWE-284 · Improper Access Control
Published
2024-05-28T06:19Z
EPSS history
Timeline
  • 28 MAY 06:19Z
    Various Issues Due To Exposed SMI Handler in AmdPspP2CmboxV2
    cvelistv5