CVE-2023-31345 - Improper input validation in the SMM handler may allow a privileged attacker to overwrite SMRAM, potentially leading to arbitrary code execution

HIGH

Improper input validation in the SMM handler may allow a privileged attacker to overwrite SMRAM, potentially leading to arbitrary code execution

Published Feb 11, 2025

7.5

HIGH

CVSS 3.1

EPSS 0.18%

Improper input validation in the SMM handler may allow a privileged attacker to overwrite SMRAM, potentially leading to arbitrary code execution.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

affected

Version	Status	Constraints
MilanPI 1.0.0.C	affected	-

No remediation recorded yet.

Weaknesses (1)

CWE-1274

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-35656		Advisory
https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3009.html
https://www.amd.com/en/resources/product-security/bulletin/amd-sb-4008.html
https://www.amd.com/en/resources/product-security/bulletin/amd-sb-5004.html