Secuno
ENNL
Book demo

CVE-2023-20596

Amd Ryzen 3 5125c Firmware vulnerability

9.8 CRITICALEPSS 1.04%
  1. Published14 Nov 2023

Description

Improper input validation in the SMM Supervisor may allow an attacker with a compromised SMI handler to gain Ring0 access potentially leading to arbitrary code execution.

CVSS 3.1 breakdown

Attack vectorNetwork
Attack complexityLow
Privileges requiredNone
User interactionNone
ScopeUnchanged
ConfidentialityHigh
IntegrityHigh
AvailabilityHigh
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

Amd Ryzen 3 5125c Firmware< cezannepi-fp6_1.0.0.fa
Amd Ryzen 3 5300ge Firmware< comboam4v2_1.2.0.b
Amd Ryzen 3 5300g Firmware< comboam4v2_1.2.0.b
Amd Ryzen 3 5400u Firmware< cezannepi-fp6_1.0.0.fa
Amd Ryzen 3 5425u Firmware< cezannepi-fp6_1.0.0.fa
Amd Ryzen 3 7335u Firmware< rembrandtpi-fp7_1.0.0.9b
Amd Ryzen 3 7440u Firmware< phoenixpi-fp8-fp7_1.0.0.2
Amd Ryzen 5 5500h Firmware< cezannepi-fp6_1.0.0.fa
Amd Ryzen 5 5560u Firmware< cezannepi-fp6_1.0.0.fa
Amd Ryzen 5 5600ge Firmware< comboam4v2_1.2.0.b
Amd Ryzen 5 5600g Firmware< comboam4v2_1.2.0.b
Amd Ryzen 5 5600h Firmware< cezannepi-fp6_1.0.0.fa
Amd Ryzen 5 5600hs Firmware< cezannepi-fp6_1.0.0.fa
Amd Ryzen 5 5600u Firmware< cezannepi-fp6_1.0.0.fa
Amd Ryzen 5 5625u Firmware< cezannepi-fp6_1.0.0.fa
Amd Ryzen 5 6600h Firmware< rembrandtpi-fp7_1.0.0.9b
Amd Ryzen 5 6600hs Firmware< rembrandtpi-fp7_1.0.0.9b
Amd Ryzen 5 6600u Firmware< rembrandtpi-fp7_1.0.0.9b
Amd Ryzen 5 7500f Firmware< comboam5pi_1.0.8.0
Amd Ryzen 5 7535hs Firmware< rembrandtpi-fp7_1.0.0.9b
Amd Ryzen 5 7535u Firmware< rembrandtpi-fp7_1.0.0.9b
Amd Ryzen 5 7600 Firmware< comboam5pi_1.0.8.0
Amd Ryzen 5 7600x Firmware< comboam5pi_1.0.8.0
Amd Ryzen 5 7640h Firmware< phoenixpi-fp8-fp7_1.0.0.2

Remediation

Fixed in
Amd Ryzen 3 5125c Firmware≥ cezannepi-fp6_1.0.0.fa
Amd Ryzen 3 5300ge Firmware≥ comboam4v2_1.2.0.b
Amd Ryzen 3 5300g Firmware≥ comboam4v2_1.2.0.b
Amd Ryzen 3 5400u Firmware≥ cezannepi-fp6_1.0.0.fa
Amd Ryzen 3 5425u Firmware≥ cezannepi-fp6_1.0.0.fa
Amd Ryzen 3 7335u Firmware≥ rembrandtpi-fp7_1.0.0.9b
Amd Ryzen 3 7440u Firmware≥ phoenixpi-fp8-fp7_1.0.0.2
Amd Ryzen 5 5500h Firmware≥ cezannepi-fp6_1.0.0.fa
Amd Ryzen 5 5560u Firmware≥ cezannepi-fp6_1.0.0.fa
Amd Ryzen 5 5600ge Firmware≥ comboam4v2_1.2.0.b

Frequently asked

Is CVE-2023-20596 being actively exploited?

CVE-2023-20596 is not in the CISA KEV catalog. Its EPSS exploit probability is 1.04%.

How severe is CVE-2023-20596?

CVE-2023-20596 has a CVSS 3.1 base score of 9.8, rated critical. EPSS estimates a 1.04% probability of exploitation.

Which products are affected by CVE-2023-20596?

Affected products include Amd Ryzen 3 5125c Firmware, Amd Ryzen 3 5300ge Firmware, Amd Ryzen 3 5300g Firmware, Amd Ryzen 3 5400u Firmware, Amd Ryzen 3 5425u Firmware, and 19 more.

How do I fix CVE-2023-20596?

Upgrade affected software to a fixed version, for example Amd Ryzen 3 5125c Firmware cezannepi-fp6_1.0.0.fa, Amd Ryzen 3 5300ge Firmware comboam4v2_1.2.0.b, Amd Ryzen 3 5300g Firmware comboam4v2_1.2.0.b or later, then confirm no affected versions remain in your inventory.

How Secuno handles this

Secuno correlates vulnerabilities like CVE-2023-20596 against the real software inventory on every managed device, every day. Rather than a static severity, each match is scored in context: exploit availability, EPSS, the asset's exposure, and business criticality decide where it lands in the queue. If an affected version is present anywhere across your portfolio, it surfaces automatically with a prioritised remediation path.

See how prioritisation worksBook a demo

Get Patch this first every Monday

Five vulnerabilities that matter this week, ranked on real exploitation. Plain language, one email, no spam.

You can unsubscribe with one click from every issue. We handle your details as described in our privacy policy.

Data from the NVD, CISA KEV catalog and FIRST EPSS. CVSS 3.1 base score shown where available.