CVE-2023-52712
First published: Tue May 28 2024(Updated: )
Various Issues Due To Exposed SMI Handler in AmdPspP2CmboxV2. The first issue can be leveraged to bypass the protections that have been put in place by previous UEFI phases to prevent direct access to the SPI flash. The second issue can be used to both leak and corrupt SMM memory, thus potentially leading code execution in SMM
Credit: psirt@huawei.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| Huawei Curiem-wfg9b Firmware | =ota-curiem-b-bios-2.28 | |
| Huawei Curiem-wfg9b |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- agent/weakness
- agent/description
- agent/first-publish-date
- agent/type
- agent/severity
- agent/event
- agent/author
- agent/references
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/tags
- agent/softwarecombine
- agent/source
- vendor/huawei
- canonical/huawei curiem-wfg9b firmware
- version/huawei curiem-wfg9b firmware/ota-curiem-b-bios-2.28
- canonical/huawei curiem-wfg9b