Ryzen 3 5100 Firmware

ryzen_3_5100_firmware

Vendor: Amd • 8 CVEs

CVEs (8)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-20571 1Amd 71Ryzen 3 5100 Firmware Ryzen 3 5125c FirmwareRyzen 3 5300g Firmware+68 more Nov 21, 2024 Nov 14, 2023 N/A· v4 8.1 HIGH· v3 N/A· v2 A race condition in System Management Mode (SMM) code may allow an attacker using a compromised user space to leverage CVE-2018-8897 potentially resulting in privilege escalation.
CVE-2023-20565 1Amd 71Ryzen 3 5100 Firmware Ryzen 3 5125c FirmwareRyzen 3 5300g Firmware+68 more Nov 21, 2024 Nov 14, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Insufficient protections in System Management Mode (SMM) code may allow an attacker to potentially enable escalation of privilege via local access.
CVE-2023-20563 1Amd 71Ryzen 3 5100 Firmware Ryzen 3 5125c FirmwareRyzen 3 5300g Firmware+68 more Nov 21, 2024 Nov 14, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Insufficient protections in System Management Mode (SMM) code may allow an attacker to potentially enable escalation of privilege via local access.
CVE-2022-23821 1Amd 108Athlon 3015ce Firmware Athlon 3015e FirmwareRyzen 3 3100 Firmware+105 more Nov 21, 2024 Nov 14, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Improper access control in System Management Mode (SMM) may allow an attacker to write to SPI ROM potentially leading to arbitrary code execution.
CVE-2022-23820 1Amd 105Athlon 3015ce Firmware Athlon 3015e FirmwareRyzen 3 3100 Firmware+102 more Nov 21, 2024 Nov 14, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Failure to validate the AMD SMM communication buffer may allow an attacker to corrupt the SMRAM potentially leading to arbitrary code execution.
CVE-2023-20589 1Amd 1224700s Firmware Athlon Gold 3150c FirmwareAthlon Gold 3150g Firmware+119 more Nov 21, 2024 Aug 8, 2023 N/A· v4 6.8 MEDIUM· v3 N/A· v2 An attacker with specialized hardware and physical access to an impacted device may be able to perform a voltage fault injection attack resulting in compromise of the ASP secure boot potentially leading to arbitrary cod...Show more An attacker with specialized hardware and physical access to an impacted device may be able to perform a voltage fault injection attack resulting in compromise of the ASP secure boot potentially leading to arbitrary code execution. Show less
CVE-2023-20569 4Amd DebianFedoraproject+1 more 155Debian Linux Epyc 72f3 FirmwareEpyc 7313 Firmware+152 more Nov 21, 2024 Aug 8, 2023 N/A· v4 4.7 MEDIUM· v3 N/A· v2 A side channel vulnerability on some of the AMD CPUs may allow an attacker to influence the return address prediction. This may result in speculative execution at an attacker-controlled address, potentially leading to...Show more A side channel vulnerability on some of the AMD CPUs may allow an attacker to influence the return address prediction. This may result in speculative execution at an attacker-controlled address, potentially leading to information disclosure. Show less
CVE-2023-20555 1Amd 119Athlon 3015ce Firmware Athlon 3015e FirmwareAthlon Gold 3150c Firmware+116 more Nov 21, 2024 Aug 8, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Insufficient input validation in CpmDisplayFeatureSmm may allow an attacker to corrupt SMM memory by overwriting an arbitrary bit in an attacker-controlled pointer potentially leading to arbitrary code execution in SMM....Show more Insufficient input validation in CpmDisplayFeatureSmm may allow an attacker to corrupt SMM memory by overwriting an arbitrary bit in an attacker-controlled pointer potentially leading to arbitrary code execution in SMM. Show less