CVE-2023-52712 — HIGH (7.8)

Vulnerability Description

Various Issues Due To Exposed SMI Handler in AmdPspP2CmboxV2. The first issue can be leveraged to bypass the protections that have been put in place by previous UEFI phases to prevent direct access to the SPI flash. The second issue can be used to both leak and corrupt SMM memory, thus potentially leading code execution in SMM

CVSS Score

7.8

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

HIGH

Availability

HIGH

Affected Products

Vendor	Product	Versions
Huawei	Curiem-Wfg9B Firmware	ota-curiem-b-bios-2.28
Huawei	Curiem-Wfg9B	-

Related Weaknesses (CWE)

CWE-284

References

https://www.huawei.com/en/psirt/security-advisories/2024/huawei-sa-iiacviahpp-71Vendor Advisory
https://www.huawei.com/en/psirt/security-advisories/2024/huawei-sa-iiacviahpp-71Vendor Advisory

FAQ

What is CVE-2023-52712?

CVE-2023-52712 is a vulnerability with a CVSS score of 7.8 (HIGH). Various Issues Due To Exposed SMI Handler in AmdPspP2CmboxV2. The first issue can be leveraged to bypass the protections that have been put in place by previous UEFI phases to prevent direct access to...

How severe is CVE-2023-52712?

CVE-2023-52712 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2023-52712?

Check the references section above for vendor advisories and patch information. Affected products include: Huawei Curiem-Wfg9B Firmware, Huawei Curiem-Wfg9B.