PT-2023-17457 · Amd+1 · Amdcpmoemsmm+1

Published 2023-03-23 · Updated 2025-08-14 · CVE-2023-20558

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions AmdCpmOemSmm (affected versions not specified)

Description The issue is related to insufficient control flow management, which may allow a privileged attacker to tamper with the SMM handler, potentially leading to an escalation of privileges.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-670

Related Identifiers

BDU:2025-11743

CVE-2023-20558

Affected Products

Amdcpmoemsmm

Red Os

References · 6

• https://bdu.fstec.ru/vul/2025-11743 · Security Note
• https://amd.com/en/resources/product-security/bulletin/amd-sb-1027.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-20558 · Vendor Advisory
• http://repo.red-soft.ru/redos/7.3c/x86_64/updates · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-20558 · Security Note
• https://redos.red-soft.ru/support/secure/uyazvimosti/support/secure/uyazvimosti/mnozhestvennye-uyazvimosti-linux-firmware-cve-2024-56161-cve-2023-20558-cve-2023-20559 · Note