VulnerabilityModified
CVE-2023-20579
Improper Access Control in the AMD SPI protection feature may allow a user with Ring0 (kernel mode) privileged access to bypass protections potentially resulting in loss of integrity and availability.
MEDIUM 6.0EPSS 0.16%
Does this matter?
Lower severity and a low EPSS score (0.16%). Track it; it rarely justifies an emergency change on its own.
Description
Improper Access Control in the AMD SPI protection feature may allow a user with Ring0 (kernel mode) privileged access to bypass protections potentially resulting in loss of integrity and availability.
- CVSS 3.1
- 6.0 MEDIUMCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H
- EPSS
- 0.16% probability · 6th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-284
- Affected
- amd/ryzen 7 5700g firmware · amd/ryzen 7 5700ge firmware · amd/ryzen 5 5600g firmware · amd/ryzen 5 5600gt firmware · amd/ryzen 5 5600ge firmware · amd/ryzen 5 5500gt firmware · amd/ryzen 3 5300g firmware · amd/ryzen 3 5300ge firmware · amd/ryzen 5 7500f firmware · amd/ryzen 5 pro 7645 firmware · amd/ryzen 5 7600x firmware · amd/ryzen 5 7600 firmware · amd/ryzen 5 7600x3d firmware · amd/ryzen 7 pro 7745 firmware · amd/ryzen 7 7700 firmware · amd/ryzen 7 7700x firmware · amd/ryzen 7 7800x3d firmware · amd/ryzen 9 pro 7945 firmware · amd/ryzen 9 7900 firmware · amd/ryzen 9 7900x firmware · +40 more
- Source
- psirt@amd.com
References
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.