CVE-2022-23829
Estado: AplazadaAlta (8.2)—
A potential weakness in AMD SPI protection features may allow a malicious attacker with Ring0 (kernel mode) access to bypass the native System Management Mode (SMM) ROM protections.
CVSS
- Versión: 3.1
- Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
- Puntuación base: 8.2
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.20%
- Percentil entre todas las CVEs puntuadas: 9
- Fecha de la puntuación: 7/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (1)
⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.
CWE
- CWE-284
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2022-23829",
"cveTags": [],
"metrics": {
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"id": "CVE-2022-23829",
"role": "CISA Coordinator",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "total"
}
],
"version": "2.0.3",
"timestamp": "2024-08-05T17:32:15.481387Z"
}
}
],
"cvssMetricV31": [
{
"type": "Secondary",
"source": "psirt@amd.com",
"cvssData": {
"scope": "CHANGED",
"version": "3.1",
"baseScore": 8.2,
"attackVector": "LOCAL",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
"integrityImpact": "HIGH",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "HIGH",
"confidentialityImpact": "HIGH"
},
"impactScore": 6,
"exploitabilityScore": 1.5
}
]
},
"affected": [
{
"source": "psirt@amd.com",
"affectedData": [
{
"vendor": "AMD",
"product": "AMD Ryzen™ Threadripper™ PRO Processors 5900 WX-Series",
"versions": [
{
"status": "affected",
"version": "various"
}
],
"defaultStatus": "affected"
},
{
"vendor": "AMD",
"product": "AMD Ryzen™ 6000 Series Mobile Processors and Workstations",
"versions": [
{
"status": "affected",
"version": "various"
}
],
"defaultStatus": "affected"
},
{
"vendor": "AMD",
"product": "AMD Ryzen™ 7000 Series Desktop Processors",
"versions": [
{
"status": "affected",
"version": "various"
}
],
"defaultStatus": "affected"
},
{
"vendor": "AMD",
"product": "AMD Ryzen™ 5000 Series Mobile Processors",
"versions": [
{
"status": "affected",
"version": "various"
}
],
"defaultStatus": "affected"
},
{
"vendor": "AMD",
"product": "AMD Ryzen™ 5000 Series Desktop Processors",
"versions": [
{
"status": "affected",
"version": "various"
}
],
"defaultStatus": "affected"
},
{
"vendor": "AMD",
"product": "AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics",
"versions": [
{
"status": "affected",
"version": "various"
}
],
"defaultStatus": "affected"
},
{
"vendor": "AMD",
"product": "AMD Ryzen™ 3000 Series Desktop Processors",
"versions": [
{
"status": "affected",
"version": "various"
}
],
"defaultStatus": "affected"
},
{
"vendor": "AMD",
"product": "AMD Ryzen™ 4000 Series Desktop Processors with Radeon™ Graphics",
"versions": [
{
"status": "affected",
"version": "various"
}
],
"defaultStatus": "affected"
},
{
"vendor": "AMD",
"product": "AMD Ryzen™ 4000 Series Mobile Processors",
"versions": [
{
"status": "affected",
"version": "various"
}
],
"defaultStatus": "affected"
},
{
"vendor": "AMD",
"product": "AMD Ryzen™ 3000 Series Mobile Processor / 2nd Gen AMD Ryzen™ Mobile Processor with Radeon™ Graphics",
"versions": [
{
"status": "affected",
"version": "various"
}
],
"defaultStatus": "affected"
},
{
"vendor": "AMD",
"product": "AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics",
"versions": [
{
"status": "affected",
"version": "various"
}
],
"defaultStatus": "affected"
},
{
"vendor": "AMD",
"product": "AMD Ryzen™ Threadripper™ PRO Processor",
"versions": [
{
"status": "affected",
"version": "various"
}
],
"defaultStatus": "affected"
},
{
"vendor": "AMD",
"product": "1st Gen AMD EPYC™ Processors",
"versions": [
{
"status": "affected",
"version": "various"
}
],
"defaultStatus": "affected"
},
{
"vendor": "AMD",
"product": "2nd Gen AMD EPYC™ Processors",
"versions": [
{
"status": "affected",
"version": "various"
}
],
"defaultStatus": "affected"
},
{
"vendor": "AMD",
"product": "3rd Gen AMD EPYC™ Processors",
"versions": [
{
"status": "affected",
"version": "various"
}
],
"defaultStatus": "affected"
},
{
"vendor": "AMD",
"product": "AMD EPYC™ Embedded 3000",
"versions": [
{
"status": "affected",
"version": "various"
}
],
"defaultStatus": "affected"
},
{
"vendor": "AMD",
"product": "AMD EPYC (TM) Embedded 7002",
"versions": [
{
"status": "affected",
"version": "various"
}
],
"defaultStatus": "affected"
},
{
"vendor": "AMD",
"product": "AMD EPYC™ Embedded 7003",
"versions": [
{
"status": "affected",
"version": "various"
}
],
"defaultStatus": "affected"
},
{
"vendor": "AMD",
"product": "AMD RyzenTM Embedded R1000",
"versions": [
{
"status": "affected",
"version": "various"
}
],
"defaultStatus": "affected"
},
{
"vendor": "AMD",
"product": "AMD RyzenTM Embedded R2000",
"versions": [
{
"status": "affected",
"version": "various"
}
],
"defaultStatus": "affected"
},
{
"vendor": "AMD",
"product": "AMD RyzenTM Embedded 5000",
"versions": [
{
"status": "affected",
"version": "various"
}
],
"defaultStatus": "affected"
},
{
"vendor": "AMD",
"product": "AMD RyzenTM Embedded V1000",
"versions": [
{
"status": "affected",
"version": "various"
}
],
"defaultStatus": "affected"
},
{
"vendor": "AMD",
"product": "AMD RyzenTM Embedded V2000",
"versions": [
{
"status": "affected",
"version": "various"
}
],
"defaultStatus": "affected"
},
{
"vendor": "AMD",
"product": "AMD RyzenTM Embedded V3000",
"versions": [
{
"status": "affected",
"version": "various"
}
],
"defaultStatus": "affected"
}
]
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"affectedData": [
{
"cpes": [
"cpe:2.3:h:amd:ryzen_threadripper_pro_5945wx:-:*:*:*:*:*:*:*",
"cpe:2.3:h:amd:ryzen_threadripper_pro_5955wx:-:*:*:*:*:*:*:*",
"cpe:2.3:h:amd:ryzen_threadripper_pro_5965wx:-:*:*:*:*:*:*:*",
"cpe:2.3:h:amd:ryzen_threadripper_pro_5975wx:-:*:*:*:*:*:*:*",
"cpe:2.3:h:amd:ryzen_threadripper_pro_5995wx:-:*:*:*:*:*:*:*"
],
"vendor": "amd",
"product": "ryzen_threadripper_pro_5995wx",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "*",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:h:amd:ryzen_6600h:-:*:*:*:*:*:*:*",
"cpe:2.3:h:amd:ryzen_6600hs:-:*:*:*:*:*:*:*",
"cpe:2.3:h:amd:ryzen_6600u:-:*:*:*:*:*:*:*",
"cpe:2.3:h:amd:ryzen_6800h:-:*:*:*:*:*:*:*",
"cpe:2.3:h:amd:ryzen_6800hs:-:*:*:*:*:*:*:*",
"cpe:2.3:h:amd:ryzen_6800u:-:*:*:*:*:*:*:*",
"cpe:2.3:h:amd:ryzen_6900hs:-:*:*:*:*:*:*:*",
"cpe:2.3:h:amd:ryzen_6900hx:-:*:*:*:*:*:*:*",
"cpe:2.3:h:amd:ryzen_6980hs:-:*:*:*:*:*:*:*",
"cpe:2.3:h:amd:ryzen_6980hx:-:*:*:*:*:*:*:*"
],
"vendor": "amd",
"product": "ryzen_6980hx",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "*",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
}
]
}
],
"published": "2024-06-18T19:15:56.957",
"references": [
{
"url": "https://www.amd.com/en/resources/product-security/bulletin/amd-sb-1041.html",
"source": "psirt@amd.com"
},
{
"url": "https://www.amd.com/en/resources/product-security/bulletin/amd-sb-1041.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Deferred",
"weaknesses": [
{
"type": "Secondary",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"description": [
{
"lang": "en",
"value": "CWE-284"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A potential weakness in AMD SPI protection features may allow a malicious attacker with Ring0 (kernel mode) access to bypass the native System Management Mode (SMM) ROM protections."
},
{
"lang": "es",
"value": "Una posible debilidad en las funciones de protección AMD SPI puede permitir que un atacante malicioso con acceso Ring0 (modo kernel) evite las protecciones ROM nativas del modo de administración del sistema (SMM)."
}
],
"lastModified": "2026-06-17T04:30:51.697",
"sourceIdentifier": "psirt@amd.com"
}