What’s Vulnerable › Vulnerabilities
CVE-2022-23821
- Severity: critical (CVSS 9.8 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 1.0% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2023-11-14 · updated 2026-06-17
Description
Improper access control in System Management Mode (SMM) may allow an attacker to write to SPI ROM potentially leading to arbitrary code execution.
Affected products
- AMD Athlon 3015Ce Firmware: pollockpi-ft5_1.0.0.5
- AMD Athlon 3015E Firmware: pollockpi-ft5_1.0.0.5
- AMD Ryzen 3 3100 Firmware: comboam4_pi_1.0.0.9, comboam4_v2_pi_1.2.0.8
- AMD Ryzen 3 3200U Firmware: picassopi-fp5_1.0.0.e
- AMD Ryzen 3 3250C Firmware: picassopi-fp5_1.0.0.e
- AMD Ryzen 3 3250U Firmware: picassopi-fp5_1.0.0.e
- AMD Ryzen 3 3300U Firmware: picassopi-fp5_1.0.0.e
- AMD Ryzen 3 3300X Firmware: comboam4_pi_1.0.0.9, comboam4_v2_pi_1.2.0.8
- AMD Ryzen 3 3350U Firmware: picassopi-fp5_1.0.0.e
- AMD Ryzen 3 4300U Firmware: renoirpi-fp6_1.0.0.9
- AMD Ryzen 3 5100 Firmware: comboam4v2_pi_1.2.0.8
- AMD Ryzen 3 5125C Firmware: cezannepi-fp6_1.0.0.b
- AMD Ryzen 3 5400U Firmware: cezannepi-fp6_1.0.0.b
- AMD Ryzen 3 5425U Firmware: cezannepi-fp6_1.0.0.b
- AMD Ryzen 3 7335U Firmware: rembrandtpi-fp7_1.0.0.2
- AMD Ryzen 5 3450U Firmware: picassopi-fp5_1.0.0.e
- AMD Ryzen 5 3500 Firmware: comboam4_pi_1.0.0.9, comboam4_v2_pi_1.2.0.8
- AMD Ryzen 5 3500C Firmware: picassopi-fp5_1.0.0.e
- AMD Ryzen 5 3500U Firmware: picassopi-fp5_1.0.0.e
- AMD Ryzen 5 3500X Firmware: comboam4_pi_1.0.0.9, comboam4_v2_pi_1.2.0.8
- AMD Ryzen 5 3550H Firmware: picassopi-fp5_1.0.0.e
- AMD Ryzen 5 3580U Firmware: picassopi-fp5_1.0.0.e
- AMD Ryzen 5 3600 Firmware: comboam4_pi_1.0.0.9, comboam4_v2_pi_1.2.0.8
- AMD Ryzen 5 3600X Firmware: comboam4_pi_1.0.0.9, comboam4_v2_pi_1.2.0.8
- AMD Ryzen 5 3600Xt Firmware: comboam4_pi_1.0.0.9, comboam4_v2_pi_1.2.0.8
- AMD Ryzen 5 4500U Firmware: renoirpi-fp6_1.0.0.9
- AMD Ryzen 5 4600H Firmware: renoirpi-fp6_1.0.0.9
- AMD Ryzen 5 4600Hs Firmware: renoirpi-fp6_1.0.0.9
- AMD Ryzen 5 4600U Firmware: renoirpi-fp6_1.0.0.9
- AMD Ryzen 5 4680U Firmware: renoirpi-fp6_1.0.0.9
References
- https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4002
- https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-5001
- https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4002
- https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-5001
Get alerted when CVE-2022-23821 or the next vulnerability affects your stack