CVE-2023-20558 — Vulnetix

CVE-2023-20558 PUBLISHED

BRLY-2022-044 High CVE-2023-20558 The BINARLY efiXplorer team has discovered an SMM callout vulnerability on a Gigabyte device allowing a potential attacker to hijack execution flow of code running in the System Management Mode. Exploitation of this issue could lead to escalation of privileges to SMM.

EPSS 0.39% · 60.6th percentile

Risk Scores

EPSS Score

0.39%

60.6th percentile

Exploit Intelligence

https://www.amd.com/en/resources/product-security/bulletin/amd-sb-1027.html (circl)

Timeline

May 10, 2022 CVE Published
Mar 24, 2023 EPSS Score
May 1, 2023 EPSS Score
Jun 9, 2023 EPSS Score
Jul 17, 2023 EPSS Score
Aug 25, 2023 EPSS Score
Oct 2, 2023 EPSS Score
Nov 9, 2023 EPSS Score
Dec 18, 2023 EPSS Score
Jan 25, 2024 EPSS Score
Mar 3, 2024 EPSS Score
Apr 11, 2024 EPSS Score

References

SMM callout vulnerability in SMM driver on AMD-based Gigabyte devices. advisory
SMM callout vulnerability in SMM driver on AMD-based Gigabyte devices. advisory

Open in Interactive Console →