Bypassing Protections and Leaking/Corrupting SMM Memory: Vulnerabilities in AmdPspP2CmboxV2

CVE-2023-52712

7.8HIGH

Key Information

Vendor
Huawei
Status
Curiem-wfg9b
Vendor
CVE Published:
28 May 2024

Summary

Various Issues Due To Exposed SMI Handler in AmdPspP2CmboxV2. The first issue can be leveraged to bypass the protections that have been put in place by previous UEFI phases to prevent direct access to the SPI flash. The second issue can be used to both leak and corrupt SMM memory, thus potentially leading code execution in SMM

Affected Version(s)

CurieM-WFG9B = OTA-CurieM-B-BIOS-2.28

Refferences

https://www.huawei.com/en/psirt/security-advisories/2024/...

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Collectors

NVD DatabaseMitre Database
.