CVE-2022-23821
No fix known EPSS <1%
Improper access control in System Management Mode (SMM) may allow an attacker to write to SPI ROM potentially leading to arbitrary code execution.
Products: AMD Ryzen™ 3000 series Desktop Processors “Matisse", AMD Ryzen™ 5000 Series Desktop Processors “Vermeer”, AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics “Cezanne”, AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics “Picasso” AM4, AMD Ryzen™ Threadripper™ 2000 Series Processors “Colfax”, AMD Ryzen™ Threadripper™ 3000 Series Processors “Castle Peak” HEDT, AMD Ryzen™ Threadripper™ PRO Processors “Castle Peak” WS SP3, AMD Ryzen™ Threadripper™ PRO 3000WX Series Processors “Chagall” WS, AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Dali”/”Dali” FP5, AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Pollock”, AMD Ryzen™ 3000 Series Mobile Processor with Radeon™ Graphics “Picasso” FP5, AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics “Renoir” FP6, AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Lucienne”, AMD Ryzen™ 5000 Series Mobile processors with Radeon™ Graphics “Cezanne”, AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics "Rembrandt", AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics “Rembrandt-R”, AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics “Barcelo”, AMD Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphics “Barcelo-R”, AMD Ryzen™ Embedded R1000, AMD Ryzen™ Embedded R2000, AMD Ryzen™ Embedded 5000, AMD Ryzen™ Embedded V1000, AMD Ryzen™ Embedded V2000, AMD Ryzen™Embedded V3000