CVE-2023-20596 - CVE House
Back to Database
Status published Unknown CVE-2023-20596

Improper input validation in the SMM Supervisor may allow an...

Vulnerability Description

Improper input validation in the SMM Supervisor may allow an attacker with a compromised SMI handler to gain Ring0 access potentially leading to arbitrary code execution.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-20596

Credits & Attribution

No credits recorded in the NVD database.

Affected Vendor

Affected Software

Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics Formerly codenamed “Cezanne” AM4, Ryzen™ 7000 Series Desktop Processors with Radeon™ Graphics Formerly codenamed “Raphael”, Ryzen™ 7000 Series Desktop Processors with Radeon™ Graphics Formerly codenamed “Raphael” X3D, Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Cezanne”, AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics "Rembrandt", AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics “Rembrandt-R”, Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics Formerly codenamed “Phoenix”
Vulnerable Versions:
various

Timeline

Official Publish: November 14th, 2023
Last Modified: August 2nd, 2024
Added to House: July 22nd, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.