CVE Feed

    Dashboard / CVE / CVE-2023-20565

    CVE-2023-20565

    Insufficient protections in System Management Mode (SMM) code may allow an attacker to potentially enable escalation of privilege via local access.

    Published:Nov 14, 2023
    Last Modified:Nov 21, 2024
    EPS:Nov 14, 2023
    EPSS Score:0.00144
    CVSS Score:7.8

    Affected Products

    Vendor
    Amd
    Product
    Ryzen 3 5100
    Vendor
    Amd
    Product
    Ryzen 3 5100 Firmware
    Vendor
    Amd
    Product
    Ryzen 3 5125c
    Vendor
    Amd
    Product
    Ryzen 3 5125c Firmware
    Vendor
    Amd
    Product
    Ryzen 3 5300g
    Vendor
    Amd
    Product
    Ryzen 3 5300g Firmware
    Vendor
    Amd
    Product
    Ryzen 3 5300ge
    Vendor
    Amd
    Product
    Ryzen 3 5300ge Firmware
    Vendor
    Amd
    Product
    Ryzen 3 5400u
    Vendor
    Amd
    Product
    Ryzen 3 5400u Firmware
    Vendor
    Amd
    Product
    Ryzen 3 5425u
    Vendor
    Amd
    Product
    Ryzen 3 5425u Firmware
    Vendor
    Amd
    Product
    Ryzen 3 7335u
    Vendor
    Amd
    Product
    Ryzen 3 7335u Firmware
    Vendor
    Amd
    Product
    Ryzen 3 Pro 7330u
    Vendor
    Amd
    Product
    Ryzen 3 Pro 7330u Firmware
    Vendor
    Amd
    Product
    Ryzen 3 Pro 7440u
    Vendor
    Amd
    Product
    Ryzen 3 Pro 7440u Firmware
    Vendor
    Amd
    Product
    Ryzen 5 5500
    Vendor
    Amd
    Product
    Ryzen 5 5500 Firmware
    Vendor
    Amd
    Product
    Ryzen 5 5500h
    Vendor
    Amd
    Product
    Ryzen 5 5500h Firmware
    Vendor
    Amd
    Product
    Ryzen 5 5560u
    Vendor
    Amd
    Product
    Ryzen 5 5560u Firmware
    Vendor
    Amd
    Product
    Ryzen 5 5600g
    Vendor
    Amd
    Product
    Ryzen 5 5600g Firmware
    Vendor
    Amd
    Product
    Ryzen 5 5600ge
    Vendor
    Amd
    Product
    Ryzen 5 5600ge Firmware
    Vendor
    Amd
    Product
    Ryzen 5 5600h
    Vendor
    Amd
    Product
    Ryzen 5 5600h Firmware
    Vendor
    Amd
    Product
    Ryzen 5 5600hs
    Vendor
    Amd
    Product
    Ryzen 5 5600hs Firmware
    Vendor
    Amd
    Product
    Ryzen 5 5600u
    Vendor
    Amd
    Product
    Ryzen 5 5600u Firmware
    Vendor
    Amd
    Product
    Ryzen 5 5625u
    Vendor
    Amd
    Product
    Ryzen 5 5625u Firmware
    Vendor
    Amd
    Product
    Ryzen 5 6600h
    Vendor
    Amd
    Product
    Ryzen 5 6600h Firmware
    Vendor
    Amd
    Product
    Ryzen 5 6600hs
    Vendor
    Amd
    Product
    Ryzen 5 6600hs Firmware
    Vendor
    Amd
    Product
    Ryzen 5 6600u
    Vendor
    Amd
    Product
    Ryzen 5 6600u Firmware
    Vendor
    Amd
    Product
    Ryzen 5 7500f
    Vendor
    Amd
    Product
    Ryzen 5 7500f Firmware
    Vendor
    Amd
    Product
    Ryzen 5 7535hs
    Vendor
    Amd
    Product
    Ryzen 5 7535hs Firmware
    Vendor
    Amd
    Product
    Ryzen 5 7535u
    Vendor
    Amd
    Product
    Ryzen 5 7535u Firmware
    Vendor
    Amd
    Product
    Ryzen 5 7600
    Vendor
    Amd
    Product
    Ryzen 5 7600 Firmware
    Vendor
    Amd
    Product
    Ryzen 5 7600x
    Vendor
    Amd
    Product
    Ryzen 5 7600x Firmware
    Vendor
    Amd
    Product
    Ryzen 5 Pro 7530u
    Vendor
    Amd
    Product
    Ryzen 5 Pro 7530u Firmware
    Vendor
    Amd
    Product
    Ryzen 5 Pro 7540u
    Vendor
    Amd
    Product
    Ryzen 5 Pro 7540u Firmware
    Vendor
    Amd
    Product
    Ryzen 5 Pro 7545u
    Vendor
    Amd
    Product
    Ryzen 5 Pro 7545u Firmware
    Vendor
    Amd
    Product
    Ryzen 5 Pro 7640h
    Vendor
    Amd
    Product
    Ryzen 5 Pro 7640h Firmware
    Vendor
    Amd
    Product
    Ryzen 5 Pro 7640hs
    Vendor
    Amd
    Product
    Ryzen 5 Pro 7640hs Firmware
    Vendor
    Amd
    Product
    Ryzen 5 Pro 7640u
    Vendor
    Amd
    Product
    Ryzen 5 Pro 7640u Firmware
    Vendor
    Amd
    Product
    Ryzen 7 5700
    Vendor
    Amd
    Product
    Ryzen 7 5700 Firmware
    Vendor
    Amd
    Product
    Ryzen 7 5700g
    Vendor
    Amd
    Product
    Ryzen 7 5700g Firmware
    Vendor
    Amd
    Product
    Ryzen 7 5700ge
    Vendor
    Amd
    Product
    Ryzen 7 5700ge Firmware
    Vendor
    Amd
    Product
    Ryzen 7 5800h
    Vendor
    Amd
    Product
    Ryzen 7 5800h Firmware
    Vendor
    Amd
    Product
    Ryzen 7 5800hs
    Vendor
    Amd
    Product
    Ryzen 7 5800hs Firmware
    Vendor
    Amd
    Product
    Ryzen 7 5800u
    Vendor
    Amd
    Product
    Ryzen 7 5800u Firmware
    Vendor
    Amd
    Product
    Ryzen 7 5825u
    Vendor
    Amd
    Product
    Ryzen 7 5825u Firmware
    Vendor
    Amd
    Product
    Ryzen 7 6800h
    Vendor
    Amd
    Product
    Ryzen 7 6800h Firmware
    Vendor
    Amd
    Product
    Ryzen 7 6800hs
    Vendor
    Amd
    Product
    Ryzen 7 6800hs Firmware
    Vendor
    Amd
    Product
    Ryzen 7 6800u
    Vendor
    Amd
    Product
    Ryzen 7 6800u Firmware
    Vendor
    Amd
    Product
    Ryzen 7 7700
    Vendor
    Amd
    Product
    Ryzen 7 7700 Firmware
    Vendor
    Amd
    Product
    Ryzen 7 7700x
    Vendor
    Amd
    Product
    Ryzen 7 7700x Firmware
    Vendor
    Amd
    Product
    Ryzen 7 7735hs
    Vendor
    Amd
    Product
    Ryzen 7 7735hs Firmware
    Vendor
    Amd
    Product
    Ryzen 7 7735u
    Vendor
    Amd
    Product
    Ryzen 7 7735u Firmware
    Vendor
    Amd
    Product
    Ryzen 7 7736u
    Vendor
    Amd
    Product
    Ryzen 7 7736u Firmware
    Vendor
    Amd
    Product
    Ryzen 7 7800x3d
    Vendor
    Amd
    Product
    Ryzen 7 7800x3d Firmware
    Vendor
    Amd
    Product
    Ryzen 7 Pro 7730u
    Vendor
    Amd
    Product
    Ryzen 7 Pro 7730u Firmware
    Vendor
    Amd
    Product
    Ryzen 7 Pro 7840h
    Vendor
    Amd
    Product
    Ryzen 7 Pro 7840h Firmware
    Vendor
    Amd
    Product
    Ryzen 7 Pro 7840hs
    Vendor
    Amd
    Product
    Ryzen 7 Pro 7840hs Firmware
    Vendor
    Amd
    Product
    Ryzen 7 Pro 7840u
    Vendor
    Amd
    Product
    Ryzen 7 Pro 7840u Firmware
    Vendor
    Amd
    Product
    Ryzen 9 5900hs
    Vendor
    Amd
    Product
    Ryzen 9 5900hs Firmware
    Vendor
    Amd
    Product
    Ryzen 9 5900hx
    Vendor
    Amd
    Product
    Ryzen 9 5900hx Firmware
    Vendor
    Amd
    Product
    Ryzen 9 5980hs
    Vendor
    Amd
    Product
    Ryzen 9 5980hs Firmware
    Vendor
    Amd
    Product
    Ryzen 9 5980hx
    Vendor
    Amd
    Product
    Ryzen 9 5980hx Firmware
    Vendor
    Amd
    Product
    Ryzen 9 6900hs
    Vendor
    Amd
    Product
    Ryzen 9 6900hs Firmware
    Vendor
    Amd
    Product
    Ryzen 9 6900hx
    Vendor
    Amd
    Product
    Ryzen 9 6900hx Firmware
    Vendor
    Amd
    Product
    Ryzen 9 6980hs
    Vendor
    Amd
    Product
    Ryzen 9 6980hs Firmware
    Vendor
    Amd
    Product
    Ryzen 9 6980hx
    Vendor
    Amd
    Product
    Ryzen 9 6980hx Firmware
    Vendor
    Amd
    Product
    Ryzen 9 7900
    Vendor
    Amd
    Product
    Ryzen 9 7900 Firmware
    Vendor
    Amd
    Product
    Ryzen 9 7900x
    Vendor
    Amd
    Product
    Ryzen 9 7900x3d
    Vendor
    Amd
    Product
    Ryzen 9 7900x3d Firmware
    Vendor
    Amd
    Product
    Ryzen 9 7900x Firmware
    Vendor
    Amd
    Product
    Ryzen 9 7950x
    Vendor
    Amd
    Product
    Ryzen 9 7950x3d
    Vendor
    Amd
    Product
    Ryzen 9 7950x3d Firmware
    Vendor
    Amd
    Product
    Ryzen 9 7950x Firmware
    Vendor
    Amd
    Product
    Ryzen 9 Pro 7940h
    Vendor
    Amd
    Product
    Ryzen 9 Pro 7940h Firmware
    Vendor
    Amd
    Product
    Ryzen 9 Pro 7940hs
    Vendor
    Amd
    Product
    Ryzen 9 Pro 7940hs Firmware
    Vendor
    Amd
    Product
    Ryzen Pro 3900
    Vendor
    Amd
    Product
    Ryzen Pro 3900 Firmware
    Vendor
    Amd
    Product
    Ryzen Pro 7645
    Vendor
    Amd
    Product
    Ryzen Pro 7645 Firmware
    Vendor
    Amd
    Product
    Ryzen Pro 7745
    Vendor
    Amd
    Product
    Ryzen Pro 7745 Firmware
    Vendor
    Amd
    Product
    Ryzen Pro 7945
    Vendor
    Amd
    Product
    Ryzen Pro 7945 Firmware

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-269 Improper Privilege Management

    Related CVEs

    CVE-2023-20571 (CVSS 8.1) — A race condition in System Management Mode (SMM) code may allow an attacker using a compromised user space to …
    CVE-2023-20563 (CVSS 7.8) — Insufficient protections in System Management Mode (SMM) code may allow an attacker to potentially enable esca…
    CVE-2022-23821 (CVSS 9.8) — Improper access control in System Management Mode (SMM) may allow an attacker to write to SPI ROM potentially …
    CVE-2022-23820 (CVSS 7.5) — Failure to validate the AMD SMM communication buffer may allow an attacker to corrupt the SMRAM potentially le…
    CVE-2023-39281 (CVSS 9.8) — A stack buffer overflow vulnerability discovered in AsfSecureBootDxe in Insyde InsydeH2O with kernel 5.0 throu…
    CVE-2023-20569 (CVSS 4.7) — A side channel vulnerability on some of the AMD CPUs may allow an attacker to influence the return address …
    CVE-2023-20589 (CVSS 6.8) — An attacker with specialized hardware and physical access to an impacted device may be able to perform a volt…
    CVE-2023-20555 (CVSS 7.8) — Insufficient input validation in CpmDisplayFeatureSmm may allow an attacker to corrupt SMM memory by overwriti…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High