{"schemaVersion":3,"id":"CVE-2022-23829","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"A potential weakness in AMD SPI protection features may allow a malicious attacker with Ring0 (kernel mode) access to bypass the native System Management Mode (SMM) ROM protections.","dates":{"published":"2024-06-18T19:01:24.315Z","modified":"2024-08-29T20:40:26.171Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":8.2,"severity":"high","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":8.2,"severity":"high","vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":8.2,"severity":"high","vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00197,"percentile":0.08882,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.00197},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00197,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00197,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00197,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00197,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00197,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00197,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00197,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00197,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00197,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00197,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00197,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00197,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00197,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00197,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00197,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00197,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00197,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00197,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00197,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00197,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00197,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00197,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00197,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00197,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00197,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00197,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00197,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00197,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00197,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00197,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00197,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00197,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00197,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00197,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00197,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00197,"percentile":0.08882}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.00197,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00197,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00197,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00197,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00197,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00197,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00197,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00197,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00197,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00197,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00197,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00197,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00197,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00197,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00197,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00197,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00197,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00197,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00197,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00197,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00197,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00197,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00197,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00197,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00197,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00197,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00197,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00197,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00197,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00197,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00197,"percentile":0.08882}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-284","name":"Improper Access Control","description":"The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.","type":"weakness","status":"Incomplete","abstraction":"Pillar","likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/284.html"}],"affected":[{"vendor":"amd","product":"1st gen amd epyc™ processors","name":"1st Gen AMD EPYC™ Processors","label":"1st gen amd epyc™ processors","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"various","noFixRecorded":false,"fixedIn":null}],"versionsText":"various","eol":null,"hubHref":"/vendor/amd/1st_gen_amd_epycTM_processors"},{"vendor":"amd","product":"2nd gen amd epyc™ processors","name":"2nd Gen AMD EPYC™ Processors","label":"2nd gen amd epyc™ processors","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"various","noFixRecorded":false,"fixedIn":null}],"versionsText":"various","eol":null,"hubHref":"/vendor/amd/2nd_gen_amd_epycTM_processors"},{"vendor":"amd","product":"3rd gen amd epyc™ processors","name":"3rd Gen AMD EPYC™ Processors","label":"3rd gen amd epyc™ processors","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"various","noFixRecorded":false,"fixedIn":null}],"versionsText":"various","eol":null,"hubHref":"/vendor/amd/3rd_gen_amd_epycTM_processors"},{"vendor":"amd","product":"amd athlon™ 3000 series mobile processors with radeon™ graphics","name":"AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics","label":"amd athlon™ 3000 series mobile processors with radeon™ graphics","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"various","noFixRecorded":false,"fixedIn":null}],"versionsText":"various","eol":null,"hubHref":"/vendor/amd/amd_athlonTM_3000_series_mobile_processors_with_radeonTM_graphics"},{"vendor":"amd","product":"amd epyc (tm) embedded 7002","name":"AMD EPYC (TM) Embedded 7002","label":"amd epyc (tm) embedded 7002","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"various","noFixRecorded":false,"fixedIn":null}],"versionsText":"various","eol":null,"hubHref":"/vendor/amd/amd_epyc_tm_embedded_7002"},{"vendor":"amd","product":"amd epyc™ embedded 3000","name":"AMD EPYC™ Embedded 3000","label":"amd epyc™ embedded 3000","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"various","noFixRecorded":false,"fixedIn":null}],"versionsText":"various","eol":null,"hubHref":"/vendor/amd/amd_epycTM_embedded_3000"},{"vendor":"amd","product":"amd epyc™ embedded 7003","name":"AMD EPYC™ Embedded 7003","label":"amd epyc™ embedded 7003","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"various","noFixRecorded":false,"fixedIn":null}],"versionsText":"various","eol":null,"hubHref":"/vendor/amd/amd_epycTM_embedded_7003"},{"vendor":"amd","product":"amd ryzen™ 3000 series desktop processors","name":"AMD Ryzen™ 3000 Series Desktop Processors","label":"amd ryzen™ 3000 series desktop processors","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"various","noFixRecorded":false,"fixedIn":null}],"versionsText":"various","eol":null,"hubHref":"/vendor/amd/amd_ryzenTM_3000_series_desktop_processors"},{"vendor":"amd","product":"amd ryzen™ 3000 series mobile processor / 2nd gen amd ryzen™ mobile processor with radeon™ graphics","name":"AMD Ryzen™ 3000 Series Mobile Processor / 2nd Gen AMD Ryzen™ Mobile Processor with Radeon™ Graphics","label":"amd ryzen™ 3000 series mobile processor / 2nd gen amd ryzen™ mobile processor with radeon™ graphics","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"various","noFixRecorded":false,"fixedIn":null}],"versionsText":"various","eol":null,"hubHref":"/vendor/amd/amd_ryzenTM_3000_series_mobile_processor__2nd_gen_amd_ryzenTM_mobile_processor_with_radeonTM_graphics"},{"vendor":"amd","product":"amd ryzen™ 4000 series desktop processors with radeon™ graphics","name":"AMD Ryzen™ 4000 Series Desktop Processors with Radeon™ Graphics","label":"amd ryzen™ 4000 series desktop processors with radeon™ graphics","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"various","noFixRecorded":false,"fixedIn":null}],"versionsText":"various","eol":null,"hubHref":"/vendor/amd/amd_ryzenTM_4000_series_desktop_processors_with_radeonTM_graphics"},{"vendor":"amd","product":"amd ryzen™ 4000 series mobile processors","name":"AMD Ryzen™ 4000 Series Mobile Processors","label":"amd ryzen™ 4000 series mobile processors","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"various","noFixRecorded":false,"fixedIn":null}],"versionsText":"various","eol":null,"hubHref":"/vendor/amd/amd_ryzenTM_4000_series_mobile_processors"},{"vendor":"amd","product":"amd ryzen™ 5000 series desktop processors","name":"AMD Ryzen™ 5000 Series Desktop Processors","label":"amd ryzen™ 5000 series desktop processors","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"various","noFixRecorded":false,"fixedIn":null}],"versionsText":"various","eol":null,"hubHref":"/vendor/amd/amd_ryzenTM_5000_series_desktop_processors"},{"vendor":"amd","product":"amd ryzen™ 5000 series mobile processors","name":"AMD Ryzen™ 5000 Series Mobile Processors","label":"amd ryzen™ 5000 series mobile processors","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"various","noFixRecorded":false,"fixedIn":null}],"versionsText":"various","eol":null,"hubHref":"/vendor/amd/amd_ryzenTM_5000_series_mobile_processors"},{"vendor":"amd","product":"amd ryzen™ 5000 series mobile processors with radeon™ graphics","name":"AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics","label":"amd ryzen™ 5000 series mobile processors with radeon™ graphics","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"various","noFixRecorded":false,"fixedIn":null}],"versionsText":"various","eol":null,"hubHref":"/vendor/amd/amd_ryzenTM_5000_series_mobile_processors_with_radeonTM_graphics"},{"vendor":"amd","product":"amd ryzen™ 6000 series mobile processors and workstations","name":"AMD Ryzen™ 6000 Series Mobile Processors and Workstations","label":"amd ryzen™ 6000 series mobile processors and workstations","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"various","noFixRecorded":false,"fixedIn":null}],"versionsText":"various","eol":null,"hubHref":"/vendor/amd/amd_ryzenTM_6000_series_mobile_processors_and_workstations"},{"vendor":"amd","product":"amd ryzen™ 7000 series desktop processors","name":"AMD Ryzen™ 7000 Series Desktop Processors","label":"amd ryzen™ 7000 series desktop processors","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"various","noFixRecorded":false,"fixedIn":null}],"versionsText":"various","eol":null,"hubHref":"/vendor/amd/amd_ryzenTM_7000_series_desktop_processors"},{"vendor":"amd","product":"amd ryzentm embedded 5000","name":"AMD RyzenTM Embedded 5000","label":"amd ryzentm embedded 5000","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"various","noFixRecorded":false,"fixedIn":null}],"versionsText":"various","eol":null,"hubHref":"/vendor/amd/amd_ryzentm_embedded_5000"},{"vendor":"amd","product":"amd ryzentm embedded r1000","name":"AMD RyzenTM Embedded R1000","label":"amd ryzentm embedded r1000","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"various","noFixRecorded":false,"fixedIn":null}],"versionsText":"various","eol":null,"hubHref":"/vendor/amd/amd_ryzentm_embedded_r1000"},{"vendor":"amd","product":"amd ryzentm embedded r2000","name":"AMD RyzenTM Embedded R2000","label":"amd ryzentm embedded r2000","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"various","noFixRecorded":false,"fixedIn":null}],"versionsText":"various","eol":null,"hubHref":"/vendor/amd/amd_ryzentm_embedded_r2000"},{"vendor":"amd","product":"amd ryzentm embedded v1000","name":"AMD RyzenTM Embedded V1000","label":"amd ryzentm embedded v1000","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"various","noFixRecorded":false,"fixedIn":null}],"versionsText":"various","eol":null,"hubHref":"/vendor/amd/amd_ryzentm_embedded_v1000"},{"vendor":"amd","product":"amd ryzentm embedded v2000","name":"AMD RyzenTM Embedded V2000","label":"amd ryzentm embedded v2000","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"various","noFixRecorded":false,"fixedIn":null}],"versionsText":"various","eol":null,"hubHref":"/vendor/amd/amd_ryzentm_embedded_v2000"},{"vendor":"amd","product":"amd ryzentm embedded v3000","name":"AMD RyzenTM Embedded V3000","label":"amd ryzentm embedded v3000","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"various","noFixRecorded":false,"fixedIn":null}],"versionsText":"various","eol":null,"hubHref":"/vendor/amd/amd_ryzentm_embedded_v3000"},{"vendor":"amd","product":"amd ryzen™ threadripper™ pro processor","name":"AMD Ryzen™ Threadripper™ PRO Processor","label":"amd ryzen™ threadripper™ pro processor","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"various","noFixRecorded":false,"fixedIn":null}],"versionsText":"various","eol":null,"hubHref":"/vendor/amd/amd_ryzenTM_threadripperTM_pro_processor"},{"vendor":"amd","product":"amd ryzen™ threadripper™ pro processors 5900 wx-series","name":"AMD Ryzen™ Threadripper™ PRO Processors 5900 WX-Series","label":"amd ryzen™ threadripper™ pro processors 5900 wx-series","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"various","noFixRecorded":false,"fixedIn":null}],"versionsText":"various","eol":null,"hubHref":"/vendor/amd/amd_ryzenTM_threadripperTM_pro_processors_5900_wx-series"}],"affectedCount":24,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://www.amd.com/en/resources/product-security/bulletin/amd-sb-1041.html","label":"www.amd.com/en/resources/product-security/bulletin/amd-sb-1041.html","hostname":"www.amd.com","tags":[]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2024-06-18T19:01:24.315Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-29T20:40:26.171Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":33,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T12:17:24.944Z","stale":false,"partial":false}}