CVE-2023-31345 describes an improper input validation vulnerability within the System Management Mode (SMM) handler, which could allow a highly privileged attacker to overwrite SMRAM, potentially leading to arbitrary code execution. This vulnerability carries a CVSS score of 7.5 (HIGH), indicating a local attack vector with high complexity, requiring high privileges, and capable of impacting confidentiality, integrity, and availability. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
| AMD | AMD Athlon™ 3000 Series Mobile Processors With Radeon™ Graphics | Range not provided by sourceCNA affecteddefault affected | |
| AMD | AMD EPYC™ 7003 Processors | MilanPI 1.0.0.CCNA affecteddefault affected | |
| AMD | AMD EPYC™ 9004 Processors | Range not provided by sourceCNA affecteddefault affected | |
| AMD | AMD EPYC™ Embedded 7003 | Range not provided by sourceCNA affecteddefault affected | |
| AMD | AMD EPYC™ Embedded 9004 | Range not provided by sourceCNA affecteddefault affected |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.3 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.2 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.