Search
Find a vulnerability
Search criteria
ⓘ
Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.
Related vulnerabilities
BDU:2025-01740 (CVE-2023-20515)
Vulnerability from fstec – Published: 2025-02-18 – Updated: 2025-08-13 – View on bdu.fstec.ru Fixed
VLAI
Title
Уязвимость драйвера fTPM микропрограммного обеспечения процессоров AMD, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации
Summary
Уязвимость драйвера fTPM микропрограммного обеспечения процессоров AMD связана с некорректной проверкой величин для выделения ресурсов и выполнения вычислений. Эксплуатация уязвимости может позволить нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации
Severity
Class
Code vulnerability
Status
Confirmed by the vendor
Exploitation
Resource manipulation
Incidents
Being clarified
Remediation
Software update
CWE
- CWE-1284 - Неправильная проверка указанного количества данных на входе
Aliases
References
Impacted products
29 products
from 1 vendor
Vendors
Advanced Micro Devices Inc.
Products
AMD Ryzen 6000 Series Mobile Processors Rembrandt, AMD Ryzen 7035 Series Mobile Processors with Radeon Graphics, AMD Ryzen Threadripper PRO 3000WX Series Processors, AMD Ryzen Embedded R1000, AMD Ryzen Embedded R2000, AMD Ryzen Embedded 5000, AMD Ryzen Embedded 7000, AMD Ryzen Embedded V1000, AMD Ryzen Embedded V2000, AMD Ryzen Embedded V3000, AMD Ryzen 3000 Series Desktop Processors Matisse AM4, AMD Ryzen 5000 Series Desktop Processors Vermeer AM4, AMD Ryzen 5000 Series Desktop processor with Radeon graphics, AMD Ryzen 7000 Series Processors Raphael, AMD Athlon 3000 Series Desktop Processors with Radeon Graphics Picasso, AMD Ryzen 4000 Series Desktop processors with Radeon graphics, AMD Ryzen 8000 Series Processor with Radeon Graphics Phoenix, AMD Ryzen Threadripper 3000 Series Processors, AMD Athlon 3000 Series Mobile Processors with Radeon Graphics Dali FP5, AMD Athlon 3000 Series Mobile Processors with Radeon Graphics Pollock, AMD Ryzen 3000 Series Mobile Processors with Radeon Graphics Picasso, AMD Ryzen 4000 Series Mobile Processors with Radeon Graphics Renoir FP6, AMD Ryzen 5000 Series Mobile Processors with Radeon Graphics Lucienne, AMD Ryzen 5000 Series Mobile Processors with Radeon Graphics Cezanne, AMD Ryzen 7020 Series Mobile Processors Mendocino, AMD Ryzen 5000 Series Processors with Radeon Graphics Barcelo, AMD Ryzen 7000 Series Processors with Radeon Graphics, AMD Ryzen 7040 Series Processors with Radeon Graphics, AMD Ryzen 7000 Series Mobile Processors Dragon Range
Versions
до RembrandtPI-FP7 1.0.0.9b (AMD Ryzen 6000 Series Mobile Processors Rembrandt), до RembrandtPI-FP7 1.0.0.9b (AMD Ryzen 7035 Series Mobile Processors with Radeon Graphics), до ChagallWSPI-sWRX8 1.0.0.9 (AMD Ryzen Threadripper PRO 3000WX Series Processors), до EmbeddedPI-FP5 1.2.0.C (AMD Ryzen Embedded R1000), до EmbeddedR2KPI-FP5 1.0.0.3 (AMD Ryzen Embedded R2000), до EmbAM4PI 1.0.0.5 (AMD Ryzen Embedded 5000), до EmbeddedAM5PI 1.0.0.0 (AMD Ryzen Embedded 7000), до EmbeddedPI-FP5 1.2.0.A (AMD Ryzen Embedded V1000), до EmbeddedPI-FP6 1.0.0.9 (AMD Ryzen Embedded V2000), до Embedded-PIFP7r2 1.0.0.8 (AMD Ryzen Embedded V3000), до ComboAM4v2PI 1.2.0.CA (AMD Ryzen 3000 Series Desktop Processors Matisse AM4), до ComboAM4v2PI 1.2.0.CA (AMD Ryzen 5000 Series Desktop Processors Vermeer AM4), до ComboAM4v2PI 1.2.0.CA (AMD Ryzen 5000 Series Desktop processor with Radeon graphics), до ComboAM5 1.0.8.0 (AMD Ryzen 7000 Series Processors Raphael), до ComboAM4v2PI 1.2.0.CA (AMD Athlon 3000 Series Desktop Processors with Radeon Graphics Picasso), до ComboAM4PI 1.0.0.B (AMD Athlon 3000 Series Desktop Processors with Radeon Graphics Picasso), до ComboAM4v2PI 1.2.0.CA (AMD Ryzen 4000 Series Desktop processors with Radeon graphics), до ComboAM5 1.0.8.0 (AMD Ryzen 8000 Series Processor with Radeon Graphics Phoenix), до CastlePeakPI-SP3r3 1.0.0.C (AMD Ryzen Threadripper 3000 Series Processors), до CastlePeakWSPI-sWRX8 1.0.0.E (AMD Ryzen Threadripper PRO 3000WX Series Processors), до Picasso-FP5 1.0.1.1 (AMD Athlon 3000 Series Mobile Processors with Radeon Graphics Dali FP5), до Pollock-FT5 1.0.0.7 (AMD Athlon 3000 Series Mobile Processors with Radeon Graphics Pollock), до Picasso-FP5 1.0.1.1 (AMD Ryzen 3000 Series Mobile Processors with Radeon Graphics Picasso), до RenoirPI-FP6 1.0.0.D (AMD Ryzen 4000 Series Mobile Processors with Radeon Graphics Renoir FP6), до Cezanne-FP6 1.0.1.0 (AMD Ryzen 5000 Series Mobile Processors with Radeon Graphics Lucienne), до Cezanne-FP6 1.0.1.0 (AMD Ryzen 5000 Series Mobile Processors with Radeon Graphics Cezanne), до MendocinoPI-FT6 1.0.0.6 (AMD Ryzen 7020 Series Mobile Processors Mendocino), до Cezanne-FP6 1.0.1.0 (AMD Ryzen 5000 Series Processors with Radeon Graphics Barcelo), до Cezanne-FP6 1.0.1.0 (AMD Ryzen 7000 Series Processors with Radeon Graphics), до PhoenixPI-FP8-FP7 1.0.8.0 (AMD Ryzen 7040 Series Processors with Radeon Graphics), до DragonRangeFL1PI 1.0.0.3b (AMD Ryzen 7000 Series Mobile Processors Dragon Range)
Product types
Firmware, Appliance software, Микропрограммный код аппаратных компонентов компьютера
Mitigations
{
"CVSS 2.0": "AV:L/AC:L/Au:S/C:P/I:P/A:P",
"CVSS 3.0": "AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L",
"CVSS 4.0": null,
"remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
"remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
"\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "Advanced Micro Devices Inc.",
"\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e RembrandtPI-FP7 1.0.0.9b (AMD Ryzen 6000 Series Mobile Processors Rembrandt), \u0434\u043e RembrandtPI-FP7 1.0.0.9b (AMD Ryzen 7035 Series Mobile Processors with Radeon Graphics), \u0434\u043e ChagallWSPI-sWRX8 1.0.0.9 (AMD Ryzen Threadripper PRO 3000WX Series Processors), \u0434\u043e EmbeddedPI-FP5 1.2.0.C (AMD Ryzen Embedded R1000), \u0434\u043e EmbeddedR2KPI-FP5 1.0.0.3 (AMD Ryzen Embedded R2000), \u0434\u043e EmbAM4PI 1.0.0.5 (AMD Ryzen Embedded 5000), \u0434\u043e EmbeddedAM5PI 1.0.0.0 (AMD Ryzen Embedded 7000), \u0434\u043e EmbeddedPI-FP5 1.2.0.A (AMD Ryzen Embedded V1000), \u0434\u043e EmbeddedPI-FP6 1.0.0.9 (AMD Ryzen Embedded V2000), \u0434\u043e Embedded-PIFP7r2 1.0.0.8 (AMD Ryzen Embedded V3000), \u0434\u043e ComboAM4v2PI 1.2.0.CA (AMD Ryzen 3000 Series Desktop Processors Matisse AM4), \u0434\u043e ComboAM4v2PI 1.2.0.CA (AMD Ryzen 5000 Series Desktop Processors Vermeer AM4), \u0434\u043e ComboAM4v2PI 1.2.0.CA (AMD Ryzen 5000 Series Desktop processor with Radeon graphics), \u0434\u043e ComboAM5 1.0.8.0 (AMD Ryzen 7000 Series Processors Raphael), \u0434\u043e ComboAM4v2PI 1.2.0.CA (AMD Athlon 3000 Series Desktop Processors with Radeon Graphics Picasso), \u0434\u043e ComboAM4PI 1.0.0.B (AMD Athlon 3000 Series Desktop Processors with Radeon Graphics Picasso), \u0434\u043e ComboAM4v2PI 1.2.0.CA (AMD Ryzen 4000 Series Desktop processors with Radeon graphics), \u0434\u043e ComboAM5 1.0.8.0 (AMD Ryzen 8000 Series Processor with Radeon Graphics Phoenix), \u0434\u043e CastlePeakPI-SP3r3 1.0.0.C (AMD Ryzen Threadripper 3000 Series Processors), \u0434\u043e CastlePeakWSPI-sWRX8 1.0.0.E (AMD Ryzen Threadripper PRO 3000WX Series Processors), \u0434\u043e Picasso-FP5 1.0.1.1 (AMD Athlon 3000 Series Mobile Processors with Radeon Graphics Dali FP5), \u0434\u043e Pollock-FT5 1.0.0.7 (AMD Athlon 3000 Series Mobile Processors with Radeon Graphics Pollock), \u0434\u043e Picasso-FP5 1.0.1.1 (AMD Ryzen 3000 Series Mobile Processors with Radeon Graphics Picasso), \u0434\u043e RenoirPI-FP6 1.0.0.D (AMD Ryzen 4000 Series Mobile Processors with Radeon Graphics Renoir FP6), \u0434\u043e Cezanne-FP6 1.0.1.0 (AMD Ryzen 5000 Series Mobile Processors with Radeon Graphics Lucienne), \u0434\u043e Cezanne-FP6 1.0.1.0 (AMD Ryzen 5000 Series Mobile Processors with Radeon Graphics Cezanne), \u0434\u043e MendocinoPI-FT6 1.0.0.6 (AMD Ryzen 7020 Series Mobile Processors Mendocino), \u0434\u043e Cezanne-FP6 1.0.1.0 (AMD Ryzen 5000 Series Processors with Radeon Graphics Barcelo), \u0434\u043e Cezanne-FP6 1.0.1.0 (AMD Ryzen 7000 Series Processors with Radeon Graphics), \u0434\u043e PhoenixPI-FP8-FP7 1.0.8.0 (AMD Ryzen 7040 Series Processors with Radeon Graphics), \u0434\u043e DragonRangeFL1PI 1.0.0.3b (AMD Ryzen 7000 Series Mobile Processors Dragon Range)",
"\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\nhttps://www.amd.com/en/resources/product-security/bulletin/amd-sb-5004.html\nhttps://www.amd.com/en/resources/product-security/bulletin/amd-sb-4008.html",
"\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "11.02.2025",
"\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "13.08.2025",
"\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "18.02.2025",
"\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2025-01740",
"\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2023-20515, AMD-SB-4008, AMD-SB-5004",
"\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
"\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
"\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "AMD Ryzen 6000 Series Mobile Processors Rembrandt, AMD Ryzen 7035 Series Mobile Processors with Radeon Graphics, AMD Ryzen Threadripper PRO 3000WX Series Processors, AMD Ryzen Embedded R1000, AMD Ryzen Embedded R2000, AMD Ryzen Embedded 5000, AMD Ryzen Embedded 7000, AMD Ryzen Embedded V1000, AMD Ryzen Embedded V2000, AMD Ryzen Embedded V3000, AMD Ryzen 3000 Series Desktop Processors Matisse AM4, AMD Ryzen 5000 Series Desktop Processors Vermeer AM4, AMD Ryzen 5000 Series Desktop processor with Radeon graphics, AMD Ryzen 7000 Series Processors Raphael, AMD Athlon 3000 Series Desktop Processors with Radeon Graphics Picasso, AMD Ryzen 4000 Series Desktop processors with Radeon graphics, AMD Ryzen 8000 Series Processor with Radeon Graphics Phoenix, AMD Ryzen Threadripper 3000 Series Processors, AMD Athlon 3000 Series Mobile Processors with Radeon Graphics Dali FP5, AMD Athlon 3000 Series Mobile Processors with Radeon Graphics Pollock, AMD Ryzen 3000 Series Mobile Processors with Radeon Graphics Picasso, AMD Ryzen 4000 Series Mobile Processors with Radeon Graphics Renoir FP6, AMD Ryzen 5000 Series Mobile Processors with Radeon Graphics Lucienne, AMD Ryzen 5000 Series Mobile Processors with Radeon Graphics Cezanne, AMD Ryzen 7020 Series Mobile Processors Mendocino, AMD Ryzen 5000 Series Processors with Radeon Graphics Barcelo, AMD Ryzen 7000 Series Processors with Radeon Graphics, AMD Ryzen 7040 Series Processors with Radeon Graphics, AMD Ryzen 7000 Series Mobile Processors Dragon Range",
"\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
"\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430 fTPM \u043c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 AMD, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u043e\u043a\u0430\u0437\u0430\u0442\u044c \u0432\u043e\u0437\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0435 \u043d\u0430 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
"\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u043e\u0433\u043e \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u043d\u0430 \u0432\u0445\u043e\u0434\u0435 (CWE-1284)",
"\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430 fTPM \u043c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 AMD \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u0432\u0435\u043b\u0438\u0447\u0438\u043d \u0434\u043b\u044f \u0432\u044b\u0434\u0435\u043b\u0435\u043d\u0438\u044f \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0432\u044b\u0447\u0438\u0441\u043b\u0435\u043d\u0438\u0439. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u043e\u043a\u0430\u0437\u0430\u0442\u044c \u0432\u043e\u0437\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0435 \u043d\u0430 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
"\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
"\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
"\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
"\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
"\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
"\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://www.amd.com/en/resources/product-security/bulletin/amd-sb-5004.html\nhttps://www.amd.com/en/resources/product-security/bulletin/amd-sb-4008.html",
"\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
"\u0422\u0438\u043f \u041f\u041e": "\u041c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0439 \u043a\u043e\u0434, \u041f\u041e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e-\u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430, \u041c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u044b\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0430",
"\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-1284",
"\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 4,3)\n\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 5,7)"
}
BDU:2025-02691 (CVE-2023-31342)
Vulnerability from fstec – Published: 2025-03-13 – Updated: 2025-09-30 – View on bdu.fstec.ru Fixed
VLAI
Title
Уязвимость режима System Management Mode (SMM) микропрограммного обеспечения процессоров AMD, позволяющая нарушителю выполнить произвольный код
Summary
Уязвимость режима System Management Mode (SMM) микропрограммного обеспечения процессоров AMD связана с недостаточной проверкой входных данных. Эксплуатация уязвимости может позволить нарушителю выполнить произвольный код
Severity
Class
Code vulnerability
Status
Confirmed by the vendor
Exploitation
Resource manipulation
Incidents
Being clarified
Remediation
Software update
CWE
- CWE-20 - Недостаточная проверка вводимых данных
Aliases
References
Impacted products
33 products
from 2 vendors
Vendors
ООО «Ред Софт», Advanced Micro Devices Inc.
Products
РЕД ОС (запись в едином реестре российских программ №3751), AMD Ryzen 4000 Series Desktop processors with Radeon graphics, AMD Ryzen Embedded R1000, AMD Ryzen Embedded R2000, AMD Ryzen Embedded 5000, AMD Ryzen Embedded V2000, AMD Ryzen 3000 Series Desktop Processors Matisse AM4, AMD Athlon 3000 Series Mobile Processors with Radeon Graphics Dali FP5, AMD Athlon 3000 Series Mobile Processors with Radeon Graphics Pollock, AMD Ryzen 3000 Series Mobile Processors with Radeon Graphics Picasso, AMD Ryzen 4000 Series Mobile Processors with Radeon Graphics Renoir FP6, AMD Ryzen 5000 Series Mobile Processors with Radeon Graphics Lucienne, AMD Ryzen 5000 Series Mobile Processors with Radeon Graphics Cezanne, AMD Ryzen 7020 Series Mobile Processors Mendocino, AMD Ryzen 5000 Series Processors with Radeon Graphics Barcelo, AMD Ryzen 7000 Series Processors with Radeon Graphics, 4th Gen AMD EPYC, 3rd Gen AMD EPYC, AMD EPYC Embedded 9004, AMD EPYC Embedded 7003, AMD Ryzen Embedded 7000, AMD Ryzen Embedded V3000, AMD Ryzen 5000 Series Desktop Processors Vermeer AM4, AMD Ryzen 5000 Series Desktop Processor with Radeon Graphics Cezanne, AMD Ryzen 7000 Series Processors Raphael, AMD Athlon 3000 Series Desktop Processors with Radeon Graphics Picasso, AMD Ryzen 8000 Series Processor with Radeon Graphics Phoenix, AMD Ryzen Threadripper PRO 5000 WX-Series, AMD Ryzen 6000 Series Processors with Radeon Graphics Rembrandt, AMD Ryzen 7035 Series Processors with Radeon Graphics “Rembrandt-R”, AMD Ryzen 7040 Series Processors with Radeon Graphics, AMD Ryzen 7000 Series Mobile Processors Dragon Range, AMD Instinct MI300A
Versions
7.3 (РЕД ОС), до ComboAM4v2PI_1.2.0.C (AMD Ryzen 4000 Series Desktop processors with Radeon graphics), до EmbeddedPI-FP5 1.2.0.C (AMD Ryzen Embedded R1000), до EmbeddedR2KPI-FP5 1.0.0.3 (AMD Ryzen Embedded R2000), до EmbAM4PI 1.0.0.5 (AMD Ryzen Embedded 5000), до EmbeddedPI-FP6 1.0.0.9 (AMD Ryzen Embedded V2000), до ComboAM4v2PI 1.2.0.CA (AMD Ryzen 3000 Series Desktop Processors Matisse AM4), до Picasso-FP5 1.0.1.1 (AMD Athlon 3000 Series Mobile Processors with Radeon Graphics Dali FP5), до Pollock-FT5 1.0.0.7 (AMD Athlon 3000 Series Mobile Processors with Radeon Graphics Pollock), до Picasso-FP5 1.0.1.1 (AMD Ryzen 3000 Series Mobile Processors with Radeon Graphics Picasso), до RenoirPI-FP6 1.0.0.D (AMD Ryzen 4000 Series Mobile Processors with Radeon Graphics Renoir FP6), до Cezanne-FP6 1.0.1.0 (AMD Ryzen 5000 Series Mobile Processors with Radeon Graphics Lucienne), до Cezanne-FP6 1.0.1.0 (AMD Ryzen 5000 Series Mobile Processors with Radeon Graphics Cezanne), до MendocinoPI-FT6 1.0.0.6 (AMD Ryzen 7020 Series Mobile Processors Mendocino), до Cezanne-FP6 1.0.1.0 (AMD Ryzen 5000 Series Processors with Radeon Graphics Barcelo), до Cezanne-FP6 1.0.1.0 (AMD Ryzen 7000 Series Processors with Radeon Graphics), до GenoaPI 1.0.0.B (4th Gen AMD EPYC), до MilanPI 1.0.0.C (3rd Gen AMD EPYC), до EmbGenoaPI-SP5 1.0.0.6 (AMD EPYC Embedded 9004), до EmbMilanPI-SP3 1.0.0.8 (AMD EPYC Embedded 7003), до EmbeddedAM5PI 1.0.0.1 (AMD Ryzen Embedded 7000), до Embedded-PIFP7r2 1.0.0.9 (AMD Ryzen Embedded V3000), до ComboAM4v2PI 1.2.0.C (AMD Ryzen 5000 Series Desktop Processors Vermeer AM4), до ComboAM4v2PI 1.2.0.C (AMD Ryzen 5000 Series Desktop Processor with Radeon Graphics Cezanne), до ComboAM5 1.1.0.2 (AMD Ryzen 7000 Series Processors Raphael), до ComboAM4v2PI 1.2.0.C (AMD Athlon 3000 Series Desktop Processors with Radeon Graphics Picasso), до ComboAM5 1.1.0.2 (AMD Ryzen 8000 Series Processor with Radeon Graphics Phoenix), до ChagallWSPI-sWRX8 1.0.0.7 (AMD Ryzen Threadripper PRO 5000 WX-Series), до Rembrandt-FP7 1.0.0.A (AMD Ryzen 6000 Series Processors with Radeon Graphics Rembrandt), до Rembrandt-FP7 1.0.0.A (AMD Ryzen 7035 Series Processors with Radeon Graphics “Rembrandt-R”), до PhoenixPI-FP8-FP7 1.1.0.2 (AMD Ryzen 7040 Series Processors with Radeon Graphics), до DragonRangeFL1PI 1.0.0.3C (AMD Ryzen 7000 Series Mobile Processors Dragon Range), до MI300API 1.0.0.5 (AMD Instinct MI300A)
Product types
Operating system, Firmware, Микропрограммный код аппаратных компонентов компьютера, Appliance software
Platforms
ООО «Ред Софт» РЕД ОС 7.3 (запись в едином реестре российских программ №3751)
Mitigations
Использование рекомендаций:
https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3009.html
https://www.amd.com/en/resources/product-security/bulletin/amd-sb-4008.html
https://www.amd.com/en/resources/product-security/bulletin/amd-sb-5004.html
Для РедОС:
http://repo.red-soft.ru/redos/7.3c/x86_64/updates/
{
"CVSS 2.0": "AV:L/AC:H/Au:S/C:C/I:C/A:C",
"CVSS 3.0": "AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H",
"CVSS 4.0": null,
"remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
"remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
"\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u041e\u041e\u041e \u00ab\u0420\u0435\u0434 \u0421\u043e\u0444\u0442\u00bb, Advanced Micro Devices Inc.",
"\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "7.3 (\u0420\u0415\u0414 \u041e\u0421), \u0434\u043e ComboAM4v2PI_1.2.0.C (AMD Ryzen 4000 Series Desktop processors with Radeon graphics), \u0434\u043e EmbeddedPI-FP5 1.2.0.C (AMD Ryzen Embedded R1000), \u0434\u043e EmbeddedR2KPI-FP5 1.0.0.3 (AMD Ryzen Embedded R2000), \u0434\u043e EmbAM4PI 1.0.0.5 (AMD Ryzen Embedded 5000), \u0434\u043e EmbeddedPI-FP6 1.0.0.9 (AMD Ryzen Embedded V2000), \u0434\u043e ComboAM4v2PI 1.2.0.CA (AMD Ryzen 3000 Series Desktop Processors Matisse AM4), \u0434\u043e Picasso-FP5 1.0.1.1 (AMD Athlon 3000 Series Mobile Processors with Radeon Graphics Dali FP5), \u0434\u043e Pollock-FT5 1.0.0.7 (AMD Athlon 3000 Series Mobile Processors with Radeon Graphics Pollock), \u0434\u043e Picasso-FP5 1.0.1.1 (AMD Ryzen 3000 Series Mobile Processors with Radeon Graphics Picasso), \u0434\u043e RenoirPI-FP6 1.0.0.D (AMD Ryzen 4000 Series Mobile Processors with Radeon Graphics Renoir FP6), \u0434\u043e Cezanne-FP6 1.0.1.0 (AMD Ryzen 5000 Series Mobile Processors with Radeon Graphics Lucienne), \u0434\u043e Cezanne-FP6 1.0.1.0 (AMD Ryzen 5000 Series Mobile Processors with Radeon Graphics Cezanne), \u0434\u043e MendocinoPI-FT6 1.0.0.6 (AMD Ryzen 7020 Series Mobile Processors Mendocino), \u0434\u043e Cezanne-FP6 1.0.1.0 (AMD Ryzen 5000 Series Processors with Radeon Graphics Barcelo), \u0434\u043e Cezanne-FP6 1.0.1.0 (AMD Ryzen 7000 Series Processors with Radeon Graphics), \u0434\u043e GenoaPI 1.0.0.B (4th Gen AMD EPYC), \u0434\u043e MilanPI 1.0.0.C (3rd Gen AMD EPYC), \u0434\u043e EmbGenoaPI-SP5 1.0.0.6 (AMD EPYC Embedded 9004), \u0434\u043e EmbMilanPI-SP3 1.0.0.8 (AMD EPYC Embedded 7003), \u0434\u043e EmbeddedAM5PI 1.0.0.1 (AMD Ryzen Embedded 7000), \u0434\u043e Embedded-PIFP7r2 1.0.0.9 (AMD Ryzen Embedded V3000), \u0434\u043e ComboAM4v2PI 1.2.0.C (AMD Ryzen 5000 Series Desktop Processors Vermeer AM4), \u0434\u043e ComboAM4v2PI 1.2.0.C (AMD Ryzen 5000 Series Desktop Processor with Radeon Graphics Cezanne), \u0434\u043e ComboAM5 1.1.0.2 (AMD Ryzen 7000 Series Processors Raphael), \u0434\u043e ComboAM4v2PI 1.2.0.C (AMD Athlon 3000 Series Desktop Processors with Radeon Graphics Picasso), \u0434\u043e ComboAM5 1.1.0.2 (AMD Ryzen 8000 Series Processor with Radeon Graphics Phoenix), \u0434\u043e ChagallWSPI-sWRX8 1.0.0.7 (AMD Ryzen Threadripper PRO 5000 WX-Series), \u0434\u043e Rembrandt-FP7 1.0.0.A (AMD Ryzen 6000 Series Processors with Radeon Graphics Rembrandt), \u0434\u043e Rembrandt-FP7 1.0.0.A (AMD Ryzen 7035 Series Processors with Radeon Graphics \u201cRembrandt-R\u201d), \u0434\u043e PhoenixPI-FP8-FP7 1.1.0.2 (AMD Ryzen 7040 Series Processors with Radeon Graphics), \u0434\u043e DragonRangeFL1PI 1.0.0.3C (AMD Ryzen 7000 Series Mobile Processors Dragon Range), \u0434\u043e MI300API 1.0.0.5 (AMD Instinct MI300A)",
"\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\nhttps://www.amd.com/en/resources/product-security/bulletin/amd-sb-3009.html \nhttps://www.amd.com/en/resources/product-security/bulletin/amd-sb-4008.html \nhttps://www.amd.com/en/resources/product-security/bulletin/amd-sb-5004.html\n\n\u0414\u043b\u044f \u0420\u0435\u0434\u041e\u0421: \nhttp://repo.red-soft.ru/redos/7.3c/x86_64/updates/",
"\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "11.02.2025",
"\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "30.09.2025",
"\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "13.03.2025",
"\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2025-02691",
"\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2023-31342, AMD-SB-3009, AMD-SB-4008, AMD-SB-5004",
"\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
"\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
"\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "\u0420\u0415\u0414 \u041e\u0421 (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u21163751), AMD Ryzen 4000 Series Desktop processors with Radeon graphics, AMD Ryzen Embedded R1000, AMD Ryzen Embedded R2000, AMD Ryzen Embedded 5000, AMD Ryzen Embedded V2000, AMD Ryzen 3000 Series Desktop Processors Matisse AM4, AMD Athlon 3000 Series Mobile Processors with Radeon Graphics Dali FP5, AMD Athlon 3000 Series Mobile Processors with Radeon Graphics Pollock, AMD Ryzen 3000 Series Mobile Processors with Radeon Graphics Picasso, AMD Ryzen 4000 Series Mobile Processors with Radeon Graphics Renoir FP6, AMD Ryzen 5000 Series Mobile Processors with Radeon Graphics Lucienne, AMD Ryzen 5000 Series Mobile Processors with Radeon Graphics Cezanne, AMD Ryzen 7020 Series Mobile Processors Mendocino, AMD Ryzen 5000 Series Processors with Radeon Graphics Barcelo, AMD Ryzen 7000 Series Processors with Radeon Graphics, 4th Gen AMD EPYC, 3rd Gen AMD EPYC, AMD EPYC Embedded 9004, AMD EPYC Embedded 7003, AMD Ryzen Embedded 7000, AMD Ryzen Embedded V3000, AMD Ryzen 5000 Series Desktop Processors Vermeer AM4, AMD Ryzen 5000 Series Desktop Processor with Radeon Graphics Cezanne, AMD Ryzen 7000 Series Processors Raphael, AMD Athlon 3000 Series Desktop Processors with Radeon Graphics Picasso, AMD Ryzen 8000 Series Processor with Radeon Graphics Phoenix, AMD Ryzen Threadripper PRO 5000 WX-Series, AMD Ryzen 6000 Series Processors with Radeon Graphics Rembrandt, AMD Ryzen 7035 Series Processors with Radeon Graphics \u201cRembrandt-R\u201d, AMD Ryzen 7040 Series Processors with Radeon Graphics, AMD Ryzen 7000 Series Mobile Processors Dragon Range, AMD Instinct MI300A",
"\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": "\u041e\u041e\u041e \u00ab\u0420\u0435\u0434 \u0421\u043e\u0444\u0442\u00bb \u0420\u0415\u0414 \u041e\u0421 7.3 (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u21163751)",
"\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0440\u0435\u0436\u0438\u043c\u0430 System Management Mode (SMM) \u043c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 AMD, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434",
"\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-20)",
"\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0440\u0435\u0436\u0438\u043c\u0430 System Management Mode (SMM) \u043c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 AMD \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434",
"\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
"\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
"\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
"\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
"\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
"\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3009.html \nhttps://www.amd.com/en/resources/product-security/bulletin/amd-sb-4008.html \nhttps://www.amd.com/en/resources/product-security/bulletin/amd-sb-5004.html\nhttp://repo.red-soft.ru/redos/7.3c/x86_64/updates/",
"\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
"\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430, \u041c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0439 \u043a\u043e\u0434, \u041c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u044b\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0430, \u041f\u041e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e-\u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430",
"\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-20",
"\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 6)\n\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}
BDU:2025-02692 (CVE-2023-31343)
Vulnerability from fstec – Published: 2025-03-13 – Updated: 2025-09-30 – View on bdu.fstec.ru Fixed
VLAI
Title
Уязвимость режима System Management Mode (SMM) микропрограммного обеспечения процессоров AMD, позволяющая нарушителю выполнить произвольный код
Summary
Уязвимость режима System Management Mode (SMM) микропрограммного обеспечения процессоров AMD связана с недостаточной проверкой входных данных. Эксплуатация уязвимости может позволить нарушителю выполнить произвольный код
Severity
Class
Code vulnerability
Status
Confirmed by the vendor
Exploitation
Resource manipulation
Incidents
Being clarified
Remediation
Software update
CWE
- CWE-20 - Недостаточная проверка вводимых данных
Aliases
References
Impacted products
33 products
from 2 vendors
Vendors
ООО «Ред Софт», Advanced Micro Devices Inc.
Products
РЕД ОС (запись в едином реестре российских программ №3751), AMD Ryzen 4000 Series Desktop processors with Radeon graphics, AMD Ryzen Embedded R1000, AMD Ryzen Embedded R2000, AMD Ryzen Embedded 5000, AMD Ryzen Embedded V2000, AMD Ryzen 3000 Series Desktop Processors Matisse AM4, AMD Athlon 3000 Series Mobile Processors with Radeon Graphics Dali FP5, AMD Athlon 3000 Series Mobile Processors with Radeon Graphics Pollock, AMD Ryzen 3000 Series Mobile Processors with Radeon Graphics Picasso, AMD Ryzen 4000 Series Mobile Processors with Radeon Graphics Renoir FP6, AMD Ryzen 5000 Series Mobile Processors with Radeon Graphics Lucienne, AMD Ryzen 5000 Series Mobile Processors with Radeon Graphics Cezanne, AMD Ryzen 7020 Series Mobile Processors Mendocino, AMD Ryzen 5000 Series Processors with Radeon Graphics Barcelo, AMD Ryzen 7000 Series Processors with Radeon Graphics, 4th Gen AMD EPYC, 3rd Gen AMD EPYC, AMD EPYC Embedded 9004, AMD EPYC Embedded 7003, AMD Ryzen Embedded 7000, AMD Ryzen Embedded V3000, AMD Ryzen 5000 Series Desktop Processors Vermeer AM4, AMD Ryzen 5000 Series Desktop Processor with Radeon Graphics Cezanne, AMD Ryzen 7000 Series Processors Raphael, AMD Athlon 3000 Series Desktop Processors with Radeon Graphics Picasso, AMD Ryzen 8000 Series Processor with Radeon Graphics Phoenix, AMD Ryzen Threadripper PRO 5000 WX-Series, AMD Ryzen 6000 Series Processors with Radeon Graphics Rembrandt, AMD Ryzen 7035 Series Processors with Radeon Graphics “Rembrandt-R”, AMD Ryzen 7040 Series Processors with Radeon Graphics, AMD Ryzen 7000 Series Mobile Processors Dragon Range, AMD Instinct MI300A
Versions
7.3 (РЕД ОС), до ComboAM4v2PI_1.2.0.C (AMD Ryzen 4000 Series Desktop processors with Radeon graphics), до EmbeddedPI-FP5 1.2.0.C (AMD Ryzen Embedded R1000), до EmbeddedR2KPI-FP5 1.0.0.3 (AMD Ryzen Embedded R2000), до EmbAM4PI 1.0.0.5 (AMD Ryzen Embedded 5000), до EmbeddedPI-FP6 1.0.0.9 (AMD Ryzen Embedded V2000), до ComboAM4v2PI 1.2.0.CA (AMD Ryzen 3000 Series Desktop Processors Matisse AM4), до Picasso-FP5 1.0.1.1 (AMD Athlon 3000 Series Mobile Processors with Radeon Graphics Dali FP5), до Pollock-FT5 1.0.0.7 (AMD Athlon 3000 Series Mobile Processors with Radeon Graphics Pollock), до Picasso-FP5 1.0.1.1 (AMD Ryzen 3000 Series Mobile Processors with Radeon Graphics Picasso), до RenoirPI-FP6 1.0.0.D (AMD Ryzen 4000 Series Mobile Processors with Radeon Graphics Renoir FP6), до Cezanne-FP6 1.0.1.0 (AMD Ryzen 5000 Series Mobile Processors with Radeon Graphics Lucienne), до Cezanne-FP6 1.0.1.0 (AMD Ryzen 5000 Series Mobile Processors with Radeon Graphics Cezanne), до MendocinoPI-FT6 1.0.0.6 (AMD Ryzen 7020 Series Mobile Processors Mendocino), до Cezanne-FP6 1.0.1.0 (AMD Ryzen 5000 Series Processors with Radeon Graphics Barcelo), до Cezanne-FP6 1.0.1.0 (AMD Ryzen 7000 Series Processors with Radeon Graphics), до GenoaPI 1.0.0.B (4th Gen AMD EPYC), до MilanPI 1.0.0.C (3rd Gen AMD EPYC), до EmbGenoaPI-SP5 1.0.0.6 (AMD EPYC Embedded 9004), до EmbMilanPI-SP3 1.0.0.8 (AMD EPYC Embedded 7003), до EmbeddedAM5PI 1.0.0.1 (AMD Ryzen Embedded 7000), до Embedded-PIFP7r2 1.0.0.9 (AMD Ryzen Embedded V3000), до ComboAM4v2PI 1.2.0.C (AMD Ryzen 5000 Series Desktop Processors Vermeer AM4), до ComboAM4v2PI 1.2.0.C (AMD Ryzen 5000 Series Desktop Processor with Radeon Graphics Cezanne), до ComboAM5 1.1.0.2 (AMD Ryzen 7000 Series Processors Raphael), до ComboAM4v2PI 1.2.0.C (AMD Athlon 3000 Series Desktop Processors with Radeon Graphics Picasso), до ComboAM5 1.1.0.2 (AMD Ryzen 8000 Series Processor with Radeon Graphics Phoenix), до ChagallWSPI-sWRX8 1.0.0.7 (AMD Ryzen Threadripper PRO 5000 WX-Series), до Rembrandt-FP7 1.0.0.A (AMD Ryzen 6000 Series Processors with Radeon Graphics Rembrandt), до Rembrandt-FP7 1.0.0.A (AMD Ryzen 7035 Series Processors with Radeon Graphics “Rembrandt-R”), до PhoenixPI-FP8-FP7 1.1.0.2 (AMD Ryzen 7040 Series Processors with Radeon Graphics), до DragonRangeFL1PI 1.0.0.3C (AMD Ryzen 7000 Series Mobile Processors Dragon Range), до MI300API 1.0.0.5 (AMD Instinct MI300A)
Product types
Operating system, Firmware, Микропрограммный код аппаратных компонентов компьютера, Appliance software
Platforms
ООО «Ред Софт» РЕД ОС 7.3 (запись в едином реестре российских программ №3751)
Mitigations
Использование рекомендаций:
https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3009.html
https://www.amd.com/en/resources/product-security/bulletin/amd-sb-4008.html
https://www.amd.com/en/resources/product-security/bulletin/amd-sb-5004.html
Для РедОС:
http://repo.red-soft.ru/redos/7.3c/x86_64/updates/
{
"CVSS 2.0": "AV:L/AC:H/Au:S/C:C/I:C/A:C",
"CVSS 3.0": "AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H",
"CVSS 4.0": null,
"remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
"remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
"\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u041e\u041e\u041e \u00ab\u0420\u0435\u0434 \u0421\u043e\u0444\u0442\u00bb, Advanced Micro Devices Inc.",
"\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "7.3 (\u0420\u0415\u0414 \u041e\u0421), \u0434\u043e ComboAM4v2PI_1.2.0.C (AMD Ryzen 4000 Series Desktop processors with Radeon graphics), \u0434\u043e EmbeddedPI-FP5 1.2.0.C (AMD Ryzen Embedded R1000), \u0434\u043e EmbeddedR2KPI-FP5 1.0.0.3 (AMD Ryzen Embedded R2000), \u0434\u043e EmbAM4PI 1.0.0.5 (AMD Ryzen Embedded 5000), \u0434\u043e EmbeddedPI-FP6 1.0.0.9 (AMD Ryzen Embedded V2000), \u0434\u043e ComboAM4v2PI 1.2.0.CA (AMD Ryzen 3000 Series Desktop Processors Matisse AM4), \u0434\u043e Picasso-FP5 1.0.1.1 (AMD Athlon 3000 Series Mobile Processors with Radeon Graphics Dali FP5), \u0434\u043e Pollock-FT5 1.0.0.7 (AMD Athlon 3000 Series Mobile Processors with Radeon Graphics Pollock), \u0434\u043e Picasso-FP5 1.0.1.1 (AMD Ryzen 3000 Series Mobile Processors with Radeon Graphics Picasso), \u0434\u043e RenoirPI-FP6 1.0.0.D (AMD Ryzen 4000 Series Mobile Processors with Radeon Graphics Renoir FP6), \u0434\u043e Cezanne-FP6 1.0.1.0 (AMD Ryzen 5000 Series Mobile Processors with Radeon Graphics Lucienne), \u0434\u043e Cezanne-FP6 1.0.1.0 (AMD Ryzen 5000 Series Mobile Processors with Radeon Graphics Cezanne), \u0434\u043e MendocinoPI-FT6 1.0.0.6 (AMD Ryzen 7020 Series Mobile Processors Mendocino), \u0434\u043e Cezanne-FP6 1.0.1.0 (AMD Ryzen 5000 Series Processors with Radeon Graphics Barcelo), \u0434\u043e Cezanne-FP6 1.0.1.0 (AMD Ryzen 7000 Series Processors with Radeon Graphics), \u0434\u043e GenoaPI 1.0.0.B (4th Gen AMD EPYC), \u0434\u043e MilanPI 1.0.0.C (3rd Gen AMD EPYC), \u0434\u043e EmbGenoaPI-SP5 1.0.0.6 (AMD EPYC Embedded 9004), \u0434\u043e EmbMilanPI-SP3 1.0.0.8 (AMD EPYC Embedded 7003), \u0434\u043e EmbeddedAM5PI 1.0.0.1 (AMD Ryzen Embedded 7000), \u0434\u043e Embedded-PIFP7r2 1.0.0.9 (AMD Ryzen Embedded V3000), \u0434\u043e ComboAM4v2PI 1.2.0.C (AMD Ryzen 5000 Series Desktop Processors Vermeer AM4), \u0434\u043e ComboAM4v2PI 1.2.0.C (AMD Ryzen 5000 Series Desktop Processor with Radeon Graphics Cezanne), \u0434\u043e ComboAM5 1.1.0.2 (AMD Ryzen 7000 Series Processors Raphael), \u0434\u043e ComboAM4v2PI 1.2.0.C (AMD Athlon 3000 Series Desktop Processors with Radeon Graphics Picasso), \u0434\u043e ComboAM5 1.1.0.2 (AMD Ryzen 8000 Series Processor with Radeon Graphics Phoenix), \u0434\u043e ChagallWSPI-sWRX8 1.0.0.7 (AMD Ryzen Threadripper PRO 5000 WX-Series), \u0434\u043e Rembrandt-FP7 1.0.0.A (AMD Ryzen 6000 Series Processors with Radeon Graphics Rembrandt), \u0434\u043e Rembrandt-FP7 1.0.0.A (AMD Ryzen 7035 Series Processors with Radeon Graphics \u201cRembrandt-R\u201d), \u0434\u043e PhoenixPI-FP8-FP7 1.1.0.2 (AMD Ryzen 7040 Series Processors with Radeon Graphics), \u0434\u043e DragonRangeFL1PI 1.0.0.3C (AMD Ryzen 7000 Series Mobile Processors Dragon Range), \u0434\u043e MI300API 1.0.0.5 (AMD Instinct MI300A)",
"\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\nhttps://www.amd.com/en/resources/product-security/bulletin/amd-sb-3009.html \nhttps://www.amd.com/en/resources/product-security/bulletin/amd-sb-4008.html \nhttps://www.amd.com/en/resources/product-security/bulletin/amd-sb-5004.html\n\n\u0414\u043b\u044f \u0420\u0435\u0434\u041e\u0421: \nhttp://repo.red-soft.ru/redos/7.3c/x86_64/updates/",
"\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "11.02.2025",
"\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "30.09.2025",
"\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "13.03.2025",
"\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2025-02692",
"\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2023-31343, AMD-SB-3009, AMD-SB-4008, AMD-SB-5004",
"\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
"\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
"\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "\u0420\u0415\u0414 \u041e\u0421 (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u21163751), AMD Ryzen 4000 Series Desktop processors with Radeon graphics, AMD Ryzen Embedded R1000, AMD Ryzen Embedded R2000, AMD Ryzen Embedded 5000, AMD Ryzen Embedded V2000, AMD Ryzen 3000 Series Desktop Processors Matisse AM4, AMD Athlon 3000 Series Mobile Processors with Radeon Graphics Dali FP5, AMD Athlon 3000 Series Mobile Processors with Radeon Graphics Pollock, AMD Ryzen 3000 Series Mobile Processors with Radeon Graphics Picasso, AMD Ryzen 4000 Series Mobile Processors with Radeon Graphics Renoir FP6, AMD Ryzen 5000 Series Mobile Processors with Radeon Graphics Lucienne, AMD Ryzen 5000 Series Mobile Processors with Radeon Graphics Cezanne, AMD Ryzen 7020 Series Mobile Processors Mendocino, AMD Ryzen 5000 Series Processors with Radeon Graphics Barcelo, AMD Ryzen 7000 Series Processors with Radeon Graphics, 4th Gen AMD EPYC, 3rd Gen AMD EPYC, AMD EPYC Embedded 9004, AMD EPYC Embedded 7003, AMD Ryzen Embedded 7000, AMD Ryzen Embedded V3000, AMD Ryzen 5000 Series Desktop Processors Vermeer AM4, AMD Ryzen 5000 Series Desktop Processor with Radeon Graphics Cezanne, AMD Ryzen 7000 Series Processors Raphael, AMD Athlon 3000 Series Desktop Processors with Radeon Graphics Picasso, AMD Ryzen 8000 Series Processor with Radeon Graphics Phoenix, AMD Ryzen Threadripper PRO 5000 WX-Series, AMD Ryzen 6000 Series Processors with Radeon Graphics Rembrandt, AMD Ryzen 7035 Series Processors with Radeon Graphics \u201cRembrandt-R\u201d, AMD Ryzen 7040 Series Processors with Radeon Graphics, AMD Ryzen 7000 Series Mobile Processors Dragon Range, AMD Instinct MI300A",
"\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": "\u041e\u041e\u041e \u00ab\u0420\u0435\u0434 \u0421\u043e\u0444\u0442\u00bb \u0420\u0415\u0414 \u041e\u0421 7.3 (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u21163751)",
"\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0440\u0435\u0436\u0438\u043c\u0430 System Management Mode (SMM) \u043c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 AMD, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434",
"\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-20)",
"\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0440\u0435\u0436\u0438\u043c\u0430 System Management Mode (SMM) \u043c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 AMD \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434",
"\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
"\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
"\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
"\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
"\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
"\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3009.html \nhttps://www.amd.com/en/resources/product-security/bulletin/amd-sb-4008.html \nhttps://www.amd.com/en/resources/product-security/bulletin/amd-sb-5004.html\nhttp://repo.red-soft.ru/redos/7.3c/x86_64/updates/",
"\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
"\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430, \u041c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0439 \u043a\u043e\u0434, \u041c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u044b\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0430, \u041f\u041e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e-\u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430",
"\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-20",
"\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 6)\n\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}
BDU:2025-02693 (CVE-2023-31345)
Vulnerability from fstec – Published: 2025-03-13 – Updated: 2025-09-30 – View on bdu.fstec.ru Fixed
VLAI
Title
Уязвимость режима System Management Mode (SMM) микропрограммного обеспечения процессоров AMD, позволяющая нарушителю выполнить произвольный код
Summary
Уязвимость режима System Management Mode (SMM) микропрограммного обеспечения процессоров AMD связана с недостаточной проверкой входных данных. Эксплуатация уязвимости может позволить нарушителю выполнить произвольный код
Severity
Class
Code vulnerability
Status
Confirmed by the vendor
Exploitation
Resource manipulation
Incidents
Being clarified
Remediation
Software update
CWE
- CWE-20 - Недостаточная проверка вводимых данных
Aliases
References
Impacted products
30 products
from 2 vendors
Vendors
ООО «Ред Софт», Advanced Micro Devices Inc.
Products
РЕД ОС (запись в едином реестре российских программ №3751), AMD Ryzen 4000 Series Desktop processors with Radeon graphics, AMD Ryzen Embedded 5000, AMD Ryzen Embedded V2000, AMD Ryzen 3000 Series Desktop Processors Matisse AM4, AMD Athlon 3000 Series Mobile Processors with Radeon Graphics Dali FP5, AMD Athlon 3000 Series Mobile Processors with Radeon Graphics Pollock, AMD Ryzen 3000 Series Mobile Processors with Radeon Graphics Picasso, AMD Ryzen 4000 Series Mobile Processors with Radeon Graphics Renoir FP6, AMD Ryzen 5000 Series Mobile Processors with Radeon Graphics Lucienne, AMD Ryzen 5000 Series Mobile Processors with Radeon Graphics Cezanne, AMD Ryzen 7020 Series Mobile Processors Mendocino, AMD Ryzen 5000 Series Processors with Radeon Graphics Barcelo, AMD Ryzen 7000 Series Processors with Radeon Graphics, 4th Gen AMD EPYC, 3rd Gen AMD EPYC, AMD EPYC Embedded 9004, AMD EPYC Embedded 7003, AMD Ryzen Embedded 7000, AMD Ryzen Embedded V3000, AMD Ryzen 5000 Series Desktop Processors Vermeer AM4, AMD Ryzen 5000 Series Desktop Processor with Radeon Graphics Cezanne, AMD Ryzen 7000 Series Processors Raphael, AMD Ryzen 8000 Series Processor with Radeon Graphics Phoenix, AMD Ryzen Threadripper PRO 5000 WX-Series, AMD Ryzen 6000 Series Processors with Radeon Graphics Rembrandt, AMD Ryzen 7035 Series Processors with Radeon Graphics “Rembrandt-R”, AMD Ryzen 7040 Series Processors with Radeon Graphics, AMD Ryzen 7000 Series Mobile Processors Dragon Range, AMD Instinct MI300A
Versions
7.3 (РЕД ОС), до ComboAM4v2PI_1.2.0.C (AMD Ryzen 4000 Series Desktop processors with Radeon graphics), до EmbAM4PI 1.0.0.5 (AMD Ryzen Embedded 5000), до EmbeddedPI-FP6 1.0.0.9 (AMD Ryzen Embedded V2000), до ComboAM4v2PI 1.2.0.CA (AMD Ryzen 3000 Series Desktop Processors Matisse AM4), до Picasso-FP5 1.0.1.1 (AMD Athlon 3000 Series Mobile Processors with Radeon Graphics Dali FP5), до Pollock-FT5 1.0.0.7 (AMD Athlon 3000 Series Mobile Processors with Radeon Graphics Pollock), до Picasso-FP5 1.0.1.1 (AMD Ryzen 3000 Series Mobile Processors with Radeon Graphics Picasso), до RenoirPI-FP6 1.0.0.D (AMD Ryzen 4000 Series Mobile Processors with Radeon Graphics Renoir FP6), до Cezanne-FP6 1.0.1.0 (AMD Ryzen 5000 Series Mobile Processors with Radeon Graphics Lucienne), до Cezanne-FP6 1.0.1.0 (AMD Ryzen 5000 Series Mobile Processors with Radeon Graphics Cezanne), до MendocinoPI-FT6 1.0.0.6 (AMD Ryzen 7020 Series Mobile Processors Mendocino), до Cezanne-FP6 1.0.1.0 (AMD Ryzen 5000 Series Processors with Radeon Graphics Barcelo), до Cezanne-FP6 1.0.1.0 (AMD Ryzen 7000 Series Processors with Radeon Graphics), до GenoaPI 1.0.0.B (4th Gen AMD EPYC), до MilanPI 1.0.0.C (3rd Gen AMD EPYC), до EmbGenoaPI-SP5 1.0.0.6 (AMD EPYC Embedded 9004), до EmbMilanPI-SP3 1.0.0.8 (AMD EPYC Embedded 7003), до EmbeddedAM5PI 1.0.0.1 (AMD Ryzen Embedded 7000), до Embedded-PIFP7r2 1.0.0.9 (AMD Ryzen Embedded V3000), до ComboAM4v2PI 1.2.0.C (AMD Ryzen 5000 Series Desktop Processors Vermeer AM4), до ComboAM4v2PI 1.2.0.C (AMD Ryzen 5000 Series Desktop Processor with Radeon Graphics Cezanne), до ComboAM5 1.1.0.2 (AMD Ryzen 7000 Series Processors Raphael), до ComboAM5 1.1.0.2 (AMD Ryzen 8000 Series Processor with Radeon Graphics Phoenix), до ChagallWSPI-sWRX8 1.0.0.7 (AMD Ryzen Threadripper PRO 5000 WX-Series), до Rembrandt-FP7 1.0.0.A (AMD Ryzen 6000 Series Processors with Radeon Graphics Rembrandt), до Rembrandt-FP7 1.0.0.A (AMD Ryzen 7035 Series Processors with Radeon Graphics “Rembrandt-R”), до PhoenixPI-FP8-FP7 1.1.0.2 (AMD Ryzen 7040 Series Processors with Radeon Graphics), до DragonRangeFL1PI 1.0.0.3C (AMD Ryzen 7000 Series Mobile Processors Dragon Range), до MI300API 1.0.0.5 (AMD Instinct MI300A)
Product types
Operating system, Firmware, Микропрограммный код аппаратных компонентов компьютера, Appliance software
Platforms
ООО «Ред Софт» РЕД ОС 7.3 (запись в едином реестре российских программ №3751)
Mitigations
Использование рекомендаций:
https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3009.html
https://www.amd.com/en/resources/product-security/bulletin/amd-sb-4008.html
https://www.amd.com/en/resources/product-security/bulletin/amd-sb-5004.html
Для РедОС:
http://repo.red-soft.ru/redos/7.3c/x86_64/updates/
{
"CVSS 2.0": "AV:L/AC:H/Au:S/C:C/I:C/A:C",
"CVSS 3.0": "AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H",
"CVSS 4.0": null,
"remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
"remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
"\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u041e\u041e\u041e \u00ab\u0420\u0435\u0434 \u0421\u043e\u0444\u0442\u00bb, Advanced Micro Devices Inc.",
"\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "7.3 (\u0420\u0415\u0414 \u041e\u0421), \u0434\u043e ComboAM4v2PI_1.2.0.C (AMD Ryzen 4000 Series Desktop processors with Radeon graphics), \u0434\u043e EmbAM4PI 1.0.0.5 (AMD Ryzen Embedded 5000), \u0434\u043e EmbeddedPI-FP6 1.0.0.9 (AMD Ryzen Embedded V2000), \u0434\u043e ComboAM4v2PI 1.2.0.CA (AMD Ryzen 3000 Series Desktop Processors Matisse AM4), \u0434\u043e Picasso-FP5 1.0.1.1 (AMD Athlon 3000 Series Mobile Processors with Radeon Graphics Dali FP5), \u0434\u043e Pollock-FT5 1.0.0.7 (AMD Athlon 3000 Series Mobile Processors with Radeon Graphics Pollock), \u0434\u043e Picasso-FP5 1.0.1.1 (AMD Ryzen 3000 Series Mobile Processors with Radeon Graphics Picasso), \u0434\u043e RenoirPI-FP6 1.0.0.D (AMD Ryzen 4000 Series Mobile Processors with Radeon Graphics Renoir FP6), \u0434\u043e Cezanne-FP6 1.0.1.0 (AMD Ryzen 5000 Series Mobile Processors with Radeon Graphics Lucienne), \u0434\u043e Cezanne-FP6 1.0.1.0 (AMD Ryzen 5000 Series Mobile Processors with Radeon Graphics Cezanne), \u0434\u043e MendocinoPI-FT6 1.0.0.6 (AMD Ryzen 7020 Series Mobile Processors Mendocino), \u0434\u043e Cezanne-FP6 1.0.1.0 (AMD Ryzen 5000 Series Processors with Radeon Graphics Barcelo), \u0434\u043e Cezanne-FP6 1.0.1.0 (AMD Ryzen 7000 Series Processors with Radeon Graphics), \u0434\u043e GenoaPI 1.0.0.B (4th Gen AMD EPYC), \u0434\u043e MilanPI 1.0.0.C (3rd Gen AMD EPYC), \u0434\u043e EmbGenoaPI-SP5 1.0.0.6 (AMD EPYC Embedded 9004), \u0434\u043e EmbMilanPI-SP3 1.0.0.8 (AMD EPYC Embedded 7003), \u0434\u043e EmbeddedAM5PI 1.0.0.1 (AMD Ryzen Embedded 7000), \u0434\u043e Embedded-PIFP7r2 1.0.0.9 (AMD Ryzen Embedded V3000), \u0434\u043e ComboAM4v2PI 1.2.0.C (AMD Ryzen 5000 Series Desktop Processors Vermeer AM4), \u0434\u043e ComboAM4v2PI 1.2.0.C (AMD Ryzen 5000 Series Desktop Processor with Radeon Graphics Cezanne), \u0434\u043e ComboAM5 1.1.0.2 (AMD Ryzen 7000 Series Processors Raphael), \u0434\u043e ComboAM5 1.1.0.2 (AMD Ryzen 8000 Series Processor with Radeon Graphics Phoenix), \u0434\u043e ChagallWSPI-sWRX8 1.0.0.7 (AMD Ryzen Threadripper PRO 5000 WX-Series), \u0434\u043e Rembrandt-FP7 1.0.0.A (AMD Ryzen 6000 Series Processors with Radeon Graphics Rembrandt), \u0434\u043e Rembrandt-FP7 1.0.0.A (AMD Ryzen 7035 Series Processors with Radeon Graphics \u201cRembrandt-R\u201d), \u0434\u043e PhoenixPI-FP8-FP7 1.1.0.2 (AMD Ryzen 7040 Series Processors with Radeon Graphics), \u0434\u043e DragonRangeFL1PI 1.0.0.3C (AMD Ryzen 7000 Series Mobile Processors Dragon Range), \u0434\u043e MI300API 1.0.0.5 (AMD Instinct MI300A)",
"\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\nhttps://www.amd.com/en/resources/product-security/bulletin/amd-sb-3009.html \nhttps://www.amd.com/en/resources/product-security/bulletin/amd-sb-4008.html \nhttps://www.amd.com/en/resources/product-security/bulletin/amd-sb-5004.html\n\n\u0414\u043b\u044f \u0420\u0435\u0434\u041e\u0421: \nhttp://repo.red-soft.ru/redos/7.3c/x86_64/updates/",
"\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "11.02.2025",
"\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "30.09.2025",
"\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "13.03.2025",
"\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2025-02693",
"\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2023-31345, AMD-SB-3009, AMD-SB-4008, AMD-SB-5004",
"\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
"\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
"\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "\u0420\u0415\u0414 \u041e\u0421 (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u21163751), AMD Ryzen 4000 Series Desktop processors with Radeon graphics, AMD Ryzen Embedded 5000, AMD Ryzen Embedded V2000, AMD Ryzen 3000 Series Desktop Processors Matisse AM4, AMD Athlon 3000 Series Mobile Processors with Radeon Graphics Dali FP5, AMD Athlon 3000 Series Mobile Processors with Radeon Graphics Pollock, AMD Ryzen 3000 Series Mobile Processors with Radeon Graphics Picasso, AMD Ryzen 4000 Series Mobile Processors with Radeon Graphics Renoir FP6, AMD Ryzen 5000 Series Mobile Processors with Radeon Graphics Lucienne, AMD Ryzen 5000 Series Mobile Processors with Radeon Graphics Cezanne, AMD Ryzen 7020 Series Mobile Processors Mendocino, AMD Ryzen 5000 Series Processors with Radeon Graphics Barcelo, AMD Ryzen 7000 Series Processors with Radeon Graphics, 4th Gen AMD EPYC, 3rd Gen AMD EPYC, AMD EPYC Embedded 9004, AMD EPYC Embedded 7003, AMD Ryzen Embedded 7000, AMD Ryzen Embedded V3000, AMD Ryzen 5000 Series Desktop Processors Vermeer AM4, AMD Ryzen 5000 Series Desktop Processor with Radeon Graphics Cezanne, AMD Ryzen 7000 Series Processors Raphael, AMD Ryzen 8000 Series Processor with Radeon Graphics Phoenix, AMD Ryzen Threadripper PRO 5000 WX-Series, AMD Ryzen 6000 Series Processors with Radeon Graphics Rembrandt, AMD Ryzen 7035 Series Processors with Radeon Graphics \u201cRembrandt-R\u201d, AMD Ryzen 7040 Series Processors with Radeon Graphics, AMD Ryzen 7000 Series Mobile Processors Dragon Range, AMD Instinct MI300A",
"\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": "\u041e\u041e\u041e \u00ab\u0420\u0435\u0434 \u0421\u043e\u0444\u0442\u00bb \u0420\u0415\u0414 \u041e\u0421 7.3 (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u21163751)",
"\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0440\u0435\u0436\u0438\u043c\u0430 System Management Mode (SMM) \u043c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 AMD, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434",
"\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-20)",
"\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0440\u0435\u0436\u0438\u043c\u0430 System Management Mode (SMM) \u043c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 AMD \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434",
"\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
"\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
"\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
"\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
"\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
"\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3009.html \nhttps://www.amd.com/en/resources/product-security/bulletin/amd-sb-4008.html \nhttps://www.amd.com/en/resources/product-security/bulletin/amd-sb-5004.html\nhttp://repo.red-soft.ru/redos/7.3c/x86_64/updates/",
"\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
"\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430, \u041c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0439 \u043a\u043e\u0434, \u041c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u044b\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0430, \u041f\u041e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e-\u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430",
"\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-20",
"\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 6)\n\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}