CVE-2022-23815
HIGHCVSS 8.2/10EPSS 0.16%
Last modified
CVE-2022-23815 is a high-severity vulnerability rated 8.2/10 on the CVSS scale. Improper bounds checking in APCB firmware may allow an attacker to perform an out of bounds write, corrupting the APCB entry, potentially leading to arbitrary code execution.. EPSS estimates a 0.16% chance of exploitation in the next 30 days.
Description
Improper bounds checking in APCB firmware may allow an attacker to perform an out of bounds write, corrupting the APCB entry, potentially leading to arbitrary code execution.
Metrics
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Amd | Athlon Silver 3050u Firmware | < picassopi-fp5_1.0.0.e |
| Amd | Athlon Gold 3150u Firmware | < picassopi-fp5_1.0.0.e |
| Amd | Ryzen 7 3780u Firmware | < picassopi-fp5_1.0.0.e |
| Amd | Ryzen 7 3750h Firmware | < picassopi-fp5_1.0.0.e |
| Amd | Ryzen 7 Pro 3700u Firmware | < picassopi-fp5_1.0.0.e |
| Amd | Ryzen 7 3700u Firmware | < picassopi-fp5_1.0.0.e |
| Amd | Ryzen 5 3580u Firmware | < picassopi-fp5_1.0.0.e |
| Amd | Ryzen 5 3550h Firmware | < picassopi-fp5_1.0.0.e |
| Amd | Ryzen 5 3500u Firmware | < picassopi-fp5_1.0.0.e |
| Amd | Ryzen 3 3300u Firmware | < picassopi-fp5_1.0.0.e |
| Amd | Ryzen 3 3250u Firmware | < picassopi-fp5_1.0.0.e |
| Amd | Ryzen 3 3200u Firmware | < picassopi-fp5_1.0.0.e |
| Amd | Athlon Gold Pro 3150g Firmware | All versions |
| Amd | Athlon Gold 3150g Firmware | All versions |
| Amd | Athlon Gold Pro 3150ge Firmware | All versions |
| Amd | Athlon Pro 300ge Firmware | All versions |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2022-23815?
Improper bounds checking in APCB firmware may allow an attacker to perform an out of bounds write, corrupting the APCB entry, potentially leading to arbitrary code execution.
How severe is CVE-2022-23815?
CVE-2022-23815 has a CVSS score of 8.2/10 (HIGH severity). The EPSS model estimates a 0.16% probability of exploitation in the next 30 days.
How do I fix CVE-2022-23815?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2022
- CVE-2022-23808An issue was discovered in phpMyAdmin 5.1 before 5.1.2. An a…6.1
- CVE-2022-2381The E Unlocked - Student Result WordPress plugin through 1.0…8.8
- CVE-2022-23810Template injection (Improper Neutralization of Special Eleme…6.5
- CVE-2022-23812This affects the package node-ipc from 10.1.1 and before 10.…9.8
- CVE-2022-23813The software interfaces to ASP and SMU may not enforce the S…5.3
- CVE-2022-23814Failure to validate addresses provided by software to BIOS c…5.3
- CVE-2022-23816Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2022-23817Insufficient checking of memory buffer in AMD Secure Process…7.3
- CVE-2022-23818Insufficient input validation on the model specific register…7.5
- CVE-2022-2382The Product Slider for WooCommerce WordPress plugin before 2…4.3
- CVE-2022-23820Failure to validate the AMD SMM communication buffer may all…9.8
- CVE-2022-23821Improper access control in System Management Mode (SMM) may …9.8
Are you affected by CVE-2022-23815?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST