VulnerabilityModified
CVE-2023-20589
An attacker with specialized hardware and physical access to an impacted device may be able to perform a voltage fault injection attack resulting in compromise of the ASP secure boot potentially leading to arbitrary code execution.
MEDIUM 6.8EPSS 0.58%
Does this matter?
Lower severity and a low EPSS score (0.58%). Track it; it rarely justifies an emergency change on its own.
Description
An attacker with specialized hardware and physical access to an impacted device may be able to perform a voltage fault injection attack resulting in compromise of the ASP secure boot potentially leading to arbitrary code execution.
- CVSS 3.1
- 6.8 MEDIUMCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 0.58% probability · 46th percentile
- CISA KEV
- Not listed
- Affected
- amd/ryzen 5 pro 3400g firmware · amd/ryzen 5 3400g firmware · amd/ryzen 5 pro 3400ge firmware · amd/ryzen 5 pro 3350g firmware · amd/ryzen 5 pro 3350ge firmware · amd/ryzen 3 pro 3200g firmware · amd/ryzen 3 3200g firmware · amd/ryzen 3 3200ge firmware · amd/ryzen 3 pro 3200ge firmware · amd/ryzen 9 3950x firmware · amd/ryzen 9 3900xt firmware · amd/ryzen 9 3900x firmware · amd/ryzen 9 3900 firmware · amd/ryzen 7 3800xt firmware · amd/ryzen 7 3800x firmware · amd/ryzen 7 3700x firmware · amd/ryzen 5 3600xt firmware · amd/ryzen 5 3600x firmware · amd/ryzen 5 3600 firmware · amd/ryzen 5 3500x firmware · +40 more
- Source
- psirt@amd.com
References
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.