VULNERABILITY INTELLIGENCE
CVE-2023-31313
CVSS score7.2 HIGH
EPSS probability0.11%
CISA KEVNot currently listed
Published2026-02-12
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N
Description
An unintended proxy or intermediary in the AMD power management firmware (PMFW) could allow a privileged attacker to send malformed messages to the system management unit (SMU) potentially resulting in arbitrary code execution.
Weakness classification
- psirt@amd.com: CWE-441