Vulnerability-Lookup

BDU:2023-07909 (CVE-2023-20598)

Vulnerability from fstec – Published: 2023-11-16 – Updated: 2023-11-16 – View on bdu.fstec.ru Fixed

Title

Уязвимость драйвера ядра (pdfwkrnl.sys) микропрограммного обеспечения графических процессоров AMD Radeon, позволяющая нарушителю повысить свои привилегии и выполнить произвольный код

Summary

Уязвимость драйвера ядра (pdfwkrnl.sys) микропрограммного обеспечения графических процессоров AMD Radeon связана с недостатками разграничения доступа. Эксплуатация уязвимости позволяет нарушителю повысить свои привилегии и выполнить произвольный код путем отправки специально сформированных запросов IOCTL

Severity

6.8 (Medium) CVSS 2.0


                      
                        AV:L/AC:L/Au:S/C:C/I:C/A:C

7.8 (High) CVSS 3.0


                      
                        CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Class

Architecture vulnerability

Status

Confirmed by the vendor

Exploitation

Authorization bypass

Incidents

Being clarified

Remediation

Software update

CWE

CWE-264 - Разрешения, привилегии и средства управления доступом
CWE-284 - Неправильный контроль доступа

Aliases

CVE-2023-20598, AMD-SB-6009

References

4 references

URL
https://www.amd.com/en/resources/product-security/bulletin/amd-sb-6009.html
https://access.redhat.com/security/cve/cve-2023-20598
https://bugzilla.redhat.com/show_bug.cgi?id=2241909
https://vuldb.com/?id.242416

Impacted products

12 products from 1 vendor

Vendors

Advanced Micro Devices Inc.

Products

AMD Radeon RX 5000 Series Graphics Cards, AMD Radeon RX 6000 Series Graphics Cards, AMD Radeon RX 7000 Series Graphics Cards, AMD Radeon PRO W5000 Series Graphics Cards, AMD Radeon PRO W6000 Series Graphics Cards, AMD Radeon PRO W7000 Series Graphics Cards, AMD Ryzen 7045 Series Processors with Radeon Graphics, AMD Ryzen 7020 Series Processors with Radeon Graphics, AMD Ryzen 7040 Series Processors with Radeon Graphics, AMD Ryzen 6000 Series Processors with Radeon Graphics, AMD Ryzen 7000 Series Processors with Radeon Graphics, AMD Ryzen 7035 Series Processors with Radeon Graphics

Versions

до 23.9.2 (23.20.11.01) (AMD Radeon RX 5000 Series Graphics Cards), до 23.9.2 (23.20.11.01) (AMD Radeon RX 6000 Series Graphics Cards), до 23.9.2 (23.20.11.01) (AMD Radeon RX 7000 Series Graphics Cards), до 23.Q4 (AMD Radeon PRO W5000 Series Graphics Cards), до 23.Q4 (AMD Radeon PRO W6000 Series Graphics Cards), до 23.Q4 (AMD Radeon PRO W7000 Series Graphics Cards), до 23.9.2 (23.20.11.01) (AMD Ryzen 7045 Series Processors with Radeon Graphics), до 23.9.2 (23.20.11.01) (AMD Ryzen 7020 Series Processors with Radeon Graphics), до 23.Q4 (23.30.14) (AMD Ryzen 7040 Series Processors with Radeon Graphics), до 23.Q4 (23.30.14) (AMD Ryzen 6000 Series Processors with Radeon Graphics), до 23.Q4 (23.30.14) (AMD Ryzen 7000 Series Processors with Radeon Graphics), до 23.Q4 (23.30.14) (AMD Ryzen 7035 Series Processors with Radeon Graphics)

Product types

Микропрограммный код аппаратных компонентов компьютера, Firmware

Platforms

Microsoft Corp Windows 10 1809 - 64-bit, Microsoft Corp Windows 10 1903 - 64-bit, Microsoft Corp Windows 10 1909 - 64-bit, Microsoft Corp Windows 10 2004 - 64-bit, Microsoft Corp Windows 10 20H2 - 64-bit, Microsoft Corp Windows 10 21H1 - 64-bit, Microsoft Corp Windows 10 21H2 - 64-bit, Microsoft Corp Windows 11 22H2 - 64-bit, Microsoft Corp Windows 11 22H2 - ARM64, Microsoft Corp Windows 10 22H2 - 64-bit, Microsoft Corp Windows 11 21H2 - 64-bit, Microsoft Corp Windows 11 21H2 - ARM64, Microsoft Corp Windows 11 21H2 - 32-bit, Microsoft Corp Windows Server 2019 1809 -, Microsoft Corp Windows Server 2022 21H2 -

Mitigations

Использование рекомендаций: https://www.amd.com/en/resources/product-security/bulletin/amd-sb-6009.html

JSON

To clipboard

{
  "CVSS 2.0": "AV:L/AC:L/Au:S/C:C/I:C/A:C",
  "CVSS 3.0": "AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "Advanced Micro Devices Inc.",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 23.9.2 (23.20.11.01) (AMD Radeon RX 5000 Series Graphics Cards), \u0434\u043e 23.9.2 (23.20.11.01) (AMD Radeon RX 6000 Series Graphics Cards), \u0434\u043e 23.9.2 (23.20.11.01) (AMD Radeon RX 7000 Series Graphics Cards), \u0434\u043e 23.Q4 (AMD Radeon PRO W5000 Series Graphics Cards), \u0434\u043e 23.Q4 (AMD Radeon PRO W6000 Series Graphics Cards), \u0434\u043e 23.Q4 (AMD Radeon PRO W7000 Series Graphics Cards), \u0434\u043e 23.9.2 (23.20.11.01) (AMD Ryzen 7045 Series Processors with Radeon Graphics), \u0434\u043e 23.9.2 (23.20.11.01) (AMD Ryzen 7020 Series Processors with Radeon Graphics), \u0434\u043e 23.Q4 (23.30.14) (AMD Ryzen 7040 Series Processors with Radeon Graphics), \u0434\u043e 23.Q4 (23.30.14) (AMD Ryzen 6000 Series Processors with Radeon Graphics), \u0434\u043e 23.Q4 (23.30.14) (AMD Ryzen 7000 Series Processors with Radeon Graphics), \u0434\u043e 23.Q4 (23.30.14) (AMD Ryzen 7035 Series Processors with Radeon Graphics)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\nhttps://www.amd.com/en/resources/product-security/bulletin/amd-sb-6009.html",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "03.10.2023",
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "16.11.2023",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "16.11.2023",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2023-07909",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2023-20598, AMD-SB-6009",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b",
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "AMD Radeon RX 5000 Series Graphics Cards, AMD Radeon RX 6000 Series Graphics Cards, AMD Radeon RX 7000 Series Graphics Cards, AMD Radeon PRO W5000 Series Graphics Cards, AMD Radeon PRO W6000 Series Graphics Cards, AMD Radeon PRO W7000 Series Graphics Cards, AMD Ryzen 7045 Series Processors with Radeon Graphics, AMD Ryzen 7020 Series Processors with Radeon Graphics, AMD Ryzen 7040 Series Processors with Radeon Graphics, AMD Ryzen 6000 Series Processors with Radeon Graphics, AMD Ryzen 7000 Series Processors with Radeon Graphics, AMD Ryzen 7035 Series Processors with Radeon Graphics",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": "Microsoft Corp Windows 10 1809 - 64-bit, Microsoft Corp Windows 10 1903 - 64-bit, Microsoft Corp Windows 10 1909 - 64-bit, Microsoft Corp Windows 10 2004 - 64-bit, Microsoft Corp Windows 10 20H2 - 64-bit, Microsoft Corp Windows 10 21H1 - 64-bit, Microsoft Corp Windows 10 21H2 - 64-bit, Microsoft Corp Windows 11 22H2 - 64-bit, Microsoft Corp Windows 11 22H2 - ARM64, Microsoft Corp Windows 10 22H2 - 64-bit, Microsoft Corp Windows 11 21H2 - 64-bit, Microsoft Corp Windows 11 21H2 - ARM64, Microsoft Corp Windows 11 21H2 - 32-bit, Microsoft Corp Windows Server 2019 1809 - , Microsoft Corp Windows Server 2022 21H2 - ",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430 \u044f\u0434\u0440\u0430 (pdfwkrnl.sys) \u043c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 AMD Radeon, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u0420\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u044f, \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0438 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c (CWE-264), \u041d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u0430 (CWE-284)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430 \u044f\u0434\u0440\u0430 (pdfwkrnl.sys) \u043c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 AMD Radeon \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u043c\u0438 \u0440\u0430\u0437\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043f\u0443\u0442\u0435\u043c \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 IOCTL",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u0435 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://www.amd.com/en/resources/product-security/bulletin/amd-sb-6009.html\nhttps://access.redhat.com/security/cve/cve-2023-20598\nhttps://bugzilla.redhat.com/show_bug.cgi?id=2241909\nhttps://vuldb.com/?id.242416",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u044b\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0430, \u041c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0439 \u043a\u043e\u0434",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-264, CWE-284",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 6,8)\n\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,8)"
}

CVE-2023-20598 (GCVE-0-2023-20598)

Vulnerability from cvelistv5 – Published: 2023-10-17 13:26 – Updated: 2024-08-02 09:05

Summary

An improper privilege management in the AMD Radeon™ Graphics driver may allow an authenticated attacker to craft an IOCTL request to gain I/O control over arbitrary hardware ports or physical addresses resulting in a potential arbitrary code execution.

Severity

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: poc Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-06-27 17:12 UTC

CWE

CWE-269 - Improper Privilege Management

Assigner

AMD mitre root

References

1 reference

URL	Tags
https://www.amd.com/en/corporate/product-security…	vendor-advisory

Impacted products

15 products

Vendor	Product	Version
AMD	Radeon™ RX 5000 Series Graphics Cards	Affected: various
AMD	Radeon™ RX 6000 Series Graphics Cards	Affected: various
AMD	Radeon™ RX 7000 Series Graphics Cards	Affected: various
AMD	Radeon™ PRO W5000 Series Graphics Cards	Affected: Various
AMD	Radeon™ PRO W6000 Series Graphics Cards	Affected: various
AMD	Radeon™ PRO W7000 Series Graphics Cards	Affected: various
AMD	Ryzen™ 7045 Series Processors with Radeon™ Graphics	Affected: various
AMD	Ryzen™ 7020 Series Processors with Radeon™ Graphics	Affected: various
AMD	Ryzen™ 7040 Series Processors with Radeon™ Graphics	Affected: various
AMD	Ryzen™ 7000 Series Processors with Radeon™ Graphics	Affected: various
AMD	Ryzen™ 6000 Series Processors with Radeon™ Graphics	Affected: various
AMD	Ryzen™ 7035 Series Processors with Radeon™ Graphics	Affected: various
amd	radeon_rx_5300_xt	Affected: 0 , ≤ * (custom) cpe:2.3:h:amd:radeon_pro_w5500:-:::::::* cpe:2.3:h:amd:radeon_pro_w5500x:-:::::::* cpe:2.3:h:amd:radeon_pro_w5700:-:::::::* cpe:2.3:h:amd:radeon_pro_w5700x:-:::::::* cpe:2.3:h:amd:radeon_pro_w6300:-:::::::* cpe:2.3:h:amd:radeon_pro_w6300m:-:::::::* cpe:2.3:h:amd:radeon_pro_w6400:-:::::::* cpe:2.3:h:amd:radeon_pro_w6500m:-:::::::* cpe:2.3:h:amd:radeon_pro_w6600:-:::::::* cpe:2.3:h:amd:radeon_pro_w6600m:-:::::::* cpe:2.3:h:amd:radeon_pro_w6600x:-:::::::* cpe:2.3:h:amd:radeon_pro_w6800:-:::::::* cpe:2.3:h:amd:radeon_pro_w6800x:-:::::::* cpe:2.3:h:amd:radeon_pro_w6800x_duo:-:::::::* cpe:2.3:h:amd:radeon_pro_w6900x:-:::::::* cpe:2.3:h:amd:radeon_pro_w7500:-:::::::* cpe:2.3:h:amd:radeon_pro_w7600:-:::::::* cpe:2.3:h:amd:radeon_pro_w7800:-:::::::* cpe:2.3:h:amd:radeon_pro_w7900:-:::::::* cpe:2.3:h:amd:radeon_rx_7600:-:::::::* cpe:2.3:h:amd:radeon_rx_7600m:-:::::::* cpe:2.3:h:amd:radeon_rx_7600m_xt:-:::::::* cpe:2.3:h:amd:radeon_rx_7600s:-:::::::* cpe:2.3:h:amd:radeon_rx_7600xt:-:::::::* cpe:2.3:h:amd:radeon_rx_7700s:-:::::::* cpe:2.3:h:amd:radeon_rx_7700xt:-:::::::* cpe:2.3:h:amd:radeon_rx_7700_xt:-:::::::* cpe:2.3:h:amd:radeon_rx_7800xt:-:::::::* cpe:2.3:h:amd:radeon_rx_7800_xt:-:::::::* cpe:2.3:h:amd:radeon_rx_7900_gre:-:::::::* cpe:2.3:h:amd:radeon_rx_7900m:-:::::::* cpe:2.3:h:amd:radeon_rx_7900xt:-:::::::* cpe:2.3:h:amd:radeon_rx_7900_xt:-:::::::* cpe:2.3:h:amd:radeon_rx_7900xtx:-:::::::* cpe:2.3:h:amd:radeon_rx_7900_xtx:-:::::::* cpe:2.3:o:amd:radeon_rx_7900xtx_firmware:-:::::::* cpe:2.3:h:amd:radeon_rx_6900_xt:-:::::::* cpe:2.3:h:amd:radeon_rx_6300m:-:::::::* cpe:2.3:h:amd:radeon_rx_6400:-:::::::* cpe:2.3:h:amd:radeon_rx_6450m:-:::::::* cpe:2.3:h:amd:radeon_rx_6500m:-:::::::* cpe:2.3:h:amd:radeon_rx_6500_xt:-:::::::* cpe:2.3:h:amd:radeon_rx_6550m:-:::::::* cpe:2.3:h:amd:radeon_rx_6550s:-:::::::* cpe:2.3:h:amd:radeon_rx_6600:-:::::::* cpe:2.3:h:amd:radeon_rx_6600m:-:::::::* cpe:2.3:h:amd:radeon_rx_6600s:-:::::::* cpe:2.3:h:amd:radeon_rx_6600_xt:-:::::::* cpe:2.3:h:amd:radeon_rx_6650m:-:::::::* cpe:2.3:h:amd:radeon_rx_6650m_xt:-:::::::* cpe:2.3:h:amd:radeon_rx_6650_xt:-:::::::* cpe:2.3:h:amd:radeon_rx_6700:-:::::::* cpe:2.3:h:amd:radeon_rx_6700m:-:::::::* cpe:2.3:h:amd:radeon_rx_6700s:-:::::::* cpe:2.3:h:amd:radeon_rx_6700_xt:-:::::::* cpe:2.3:h:amd:radeon_rx_6750_gre_10gb:-:::::::* cpe:2.3:h:amd:radeon_rx_6750_gre_12gb:-:::::::* cpe:2.3:h:amd:radeon_rx_6750_xt:-:::::::* cpe:2.3:h:amd:radeon_rx_6800:-:::::::* cpe:2.3:h:amd:radeon_rx_6800m:-:::::::* cpe:2.3:h:amd:radeon_rx_6800s:-:::::::* cpe:2.3:h:amd:radeon_rx_5700:-:::::::* cpe:2.3:h:amd:radeon_rx_5700_xt:-:::::::* cpe:2.3:h:amd:radeon_rx_5600:-:::::::* cpe:2.3:h:amd:radeon_rx_5600_xt:-:::::::* cpe:2.3:h:amd:radeon_rx_5500:-:::::::* cpe:2.3:h:amd:radeon_rx_5500_xt:-:::::::* cpe:2.3:h:amd:radeon_rx_5300:-:::::::* cpe:2.3:h:amd:radeon_rx_5300_xt:-:::::::*
amd	ryzen_5_7645hx	Affected: 0 , < * (custom) cpe:2.3:h:amd:ryzen_7_7700:-:::::::* cpe:2.3:h:amd:ryzen_7_7700x:-:::::::* cpe:2.3:h:amd:ryzen_7_7735hs:-:::::::* cpe:2.3:h:amd:ryzen_7_7735u:-:::::::* cpe:2.3:h:amd:ryzen_7_7736u:-:::::::* cpe:2.3:h:amd:ryzen_7_7745hx:-:::::::* cpe:2.3:h:amd:ryzen_7_7800x3d:-:::::::* cpe:2.3:h:amd:ryzen_7_7840h:-:::::::* cpe:2.3:h:amd:ryzen_7_7840u:-:::::::* cpe:2.3:h:amd:ryzen_7_pro_7745:-:::::::* cpe:2.3:h:amd:ryzen_7_pro_7840h:-:::::::* cpe:2.3:h:amd:ryzen_7_pro_7840hs:-:::::::* cpe:2.3:h:amd:ryzen_7_6800hs:-:::::::* cpe:2.3:h:amd:ryzen_7_6800h:-:::::::* cpe:2.3:h:amd:ryzen_3_7320u:-:::::::* cpe:2.3:h:amd:ryzen_3_7335u:-:::::::* cpe:2.3:h:amd:ryzen_3_7440u:-:::::::* cpe:2.3:h:amd:ryzen_5_6600h:-:::::::* cpe:2.3:h:amd:ryzen_5_6600hs:-:::::::* cpe:2.3:h:amd:ryzen_5_6600u:-:::::::* cpe:2.3:h:amd:ryzen_5_7500f:-:::::::* cpe:2.3:h:amd:ryzen_5_7520u:-:::::::* cpe:2.3:h:amd:ryzen_5_7535hs:-:::::::* cpe:2.3:h:amd:ryzen_5_7535u:-:::::::* cpe:2.3:h:amd:ryzen_5_7545u:-:::::::* cpe:2.3:h:amd:ryzen_5_7600:-:::::::* cpe:2.3:h:amd:ryzen_5_7600x:-:::::::* cpe:2.3:h:amd:ryzen_5_7640h:-:::::::* cpe:2.3:h:amd:ryzen_5_7640u:-:::::::* cpe:2.3:h:amd:ryzen_5_7645hx:-:::::::*
amd	ryzen_9_pro_7945	Affected: 0 , < * (custom) cpe:2.3:h:amd:ryzen_9_6980hs:-:::::::* cpe:2.3:h:amd:ryzen_9_6980hx:-:::::::* cpe:2.3:h:amd:ryzen_9_7845hx:-:::::::* cpe:2.3:h:amd:ryzen_9_7900:-:::::::* cpe:2.3:h:amd:ryzen_9_7900x:-:::::::* cpe:2.3:h:amd:ryzen_9_7900x3d:-:::::::* cpe:2.3:h:amd:ryzen_9_7945hx:-:::::::* cpe:2.3:h:amd:ryzen_9_7945hx3d:-:::::::* cpe:2.3:h:amd:ryzen_9_7950x:-:::::::* cpe:2.3:h:amd:ryzen_9_7950x3d:-:::::::* cpe:2.3:h:amd:ryzen_9_pro_7940h:-:::::::* cpe:2.3:h:amd:ryzen_9_pro_7940hs:-:::::::* cpe:2.3:h:amd:ryzen_9_pro_7945:-:::::::*

Date Public

2023-10-16 17:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:h:amd:radeon_pro_w5500:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:amd:radeon_pro_w5500x:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:amd:radeon_pro_w5700:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:amd:radeon_pro_w5700x:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:amd:radeon_pro_w6300:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:amd:radeon_pro_w6300m:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:amd:radeon_pro_w6400:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:amd:radeon_pro_w6500m:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:amd:radeon_pro_w6600:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:amd:radeon_pro_w6600m:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:amd:radeon_pro_w6600x:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:amd:radeon_pro_w6800:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:amd:radeon_pro_w6800x:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:amd:radeon_pro_w6800x_duo:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:amd:radeon_pro_w6900x:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:amd:radeon_pro_w7500:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:amd:radeon_pro_w7600:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:amd:radeon_pro_w7800:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:amd:radeon_pro_w7900:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:amd:radeon_rx_7600:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:amd:radeon_rx_7600m:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:amd:radeon_rx_7600m_xt:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:amd:radeon_rx_7600s:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:amd:radeon_rx_7600xt:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:amd:radeon_rx_7700s:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:amd:radeon_rx_7700xt:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:amd:radeon_rx_7700_xt:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:amd:radeon_rx_7800xt:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:amd:radeon_rx_7800_xt:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:amd:radeon_rx_7900_gre:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:amd:radeon_rx_7900m:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:amd:radeon_rx_7900xt:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:amd:radeon_rx_7900_xt:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:amd:radeon_rx_7900xtx:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:amd:radeon_rx_7900_xtx:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:amd:radeon_rx_7900xtx_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:amd:radeon_rx_6900_xt:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:amd:radeon_rx_6300m:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:amd:radeon_rx_6400:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:amd:radeon_rx_6450m:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:amd:radeon_rx_6500m:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:amd:radeon_rx_6500_xt:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:amd:radeon_rx_6550m:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:amd:radeon_rx_6550s:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:amd:radeon_rx_6600:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:amd:radeon_rx_6600m:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:amd:radeon_rx_6600s:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:amd:radeon_rx_6600_xt:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:amd:radeon_rx_6650m:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:amd:radeon_rx_6650m_xt:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:amd:radeon_rx_6650_xt:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:amd:radeon_rx_6700:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:amd:radeon_rx_6700m:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:amd:radeon_rx_6700s:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:amd:radeon_rx_6700_xt:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:amd:radeon_rx_6750_gre_10gb:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:amd:radeon_rx_6750_gre_12gb:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:amd:radeon_rx_6750_xt:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:amd:radeon_rx_6800:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:amd:radeon_rx_6800m:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:amd:radeon_rx_6800s:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:amd:radeon_rx_5700:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:amd:radeon_rx_5700_xt:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:amd:radeon_rx_5600:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:amd:radeon_rx_5600_xt:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:amd:radeon_rx_5500:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:amd:radeon_rx_5500_xt:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:amd:radeon_rx_5300:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:amd:radeon_rx_5300_xt:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "radeon_rx_5300_xt",
            "vendor": "amd",
            "versions": [
              {
                "lessThanOrEqual": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:amd:ryzen_7_7700:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:amd:ryzen_7_7700x:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:amd:ryzen_7_7735hs:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:amd:ryzen_7_7735u:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:amd:ryzen_7_7736u:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:amd:ryzen_7_7745hx:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:amd:ryzen_7_7800x3d:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:amd:ryzen_7_7840h:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:amd:ryzen_7_7840u:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:amd:ryzen_7_pro_7745:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:amd:ryzen_7_pro_7840h:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:amd:ryzen_7_pro_7840hs:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:amd:ryzen_7_6800hs:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:amd:ryzen_7_6800h:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:amd:ryzen_3_7320u:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:amd:ryzen_3_7335u:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:amd:ryzen_3_7440u:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:amd:ryzen_5_6600h:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:amd:ryzen_5_6600hs:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:amd:ryzen_5_6600u:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:amd:ryzen_5_7500f:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:amd:ryzen_5_7520u:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:amd:ryzen_5_7535hs:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:amd:ryzen_5_7535u:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:amd:ryzen_5_7545u:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:amd:ryzen_5_7600:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:amd:ryzen_5_7600x:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:amd:ryzen_5_7640h:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:amd:ryzen_5_7640u:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:amd:ryzen_5_7645hx:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ryzen_5_7645hx",
            "vendor": "amd",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:amd:ryzen_9_6980hs:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:amd:ryzen_9_6980hx:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:amd:ryzen_9_7845hx:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:amd:ryzen_9_7900:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:amd:ryzen_9_7900x:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:amd:ryzen_9_7900x3d:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:amd:ryzen_9_7945hx:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:amd:ryzen_9_7945hx3d:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:amd:ryzen_9_7950x:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:amd:ryzen_9_7950x3d:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:amd:ryzen_9_pro_7940h:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:amd:ryzen_9_pro_7940hs:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:amd:ryzen_9_pro_7945:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ryzen_9_pro_7945",
            "vendor": "amd",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 7.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2023-20598",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-06-27T17:12:05.139002Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-269",
                "description": "CWE-269 Improper Privilege Management",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-06-27T17:12:23.788Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T09:05:36.253Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-6009"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "affected",
          "platforms": [
            "Windows",
            "x86"
          ],
          "product": "Radeon\u2122 RX 5000 Series Graphics Cards",
          "vendor": " AMD",
          "versions": [
            {
              "status": "affected",
              "version": "various"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "platforms": [
            "Windows",
            "x86"
          ],
          "product": "Radeon\u2122 RX 6000 Series Graphics Cards",
          "vendor": "AMD",
          "versions": [
            {
              "status": "affected",
              "version": "various "
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "platforms": [
            "Windows",
            "x86"
          ],
          "product": "Radeon\u2122 RX 7000 Series Graphics Cards",
          "vendor": "AMD",
          "versions": [
            {
              "status": "affected",
              "version": "various "
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "platforms": [
            "Windows",
            "x86"
          ],
          "product": "Radeon\u2122 PRO W5000 Series Graphics Cards",
          "vendor": "AMD",
          "versions": [
            {
              "status": "affected",
              "version": "Various "
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "platforms": [
            "Windows",
            "x86"
          ],
          "product": "Radeon\u2122 PRO W6000 Series Graphics Cards",
          "vendor": "AMD",
          "versions": [
            {
              "status": "affected",
              "version": "various "
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "platforms": [
            "Windows",
            "x86"
          ],
          "product": "Radeon\u2122 PRO W7000 Series Graphics Cards",
          "vendor": "AMD",
          "versions": [
            {
              "status": "affected",
              "version": "various"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "platforms": [
            "Windows",
            "x86"
          ],
          "product": "Ryzen\u2122 7045 Series Processors with Radeon\u2122 Graphics",
          "vendor": "AMD",
          "versions": [
            {
              "status": "affected",
              "version": "various "
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "platforms": [
            "Windows",
            "x86"
          ],
          "product": " Ryzen\u2122 7020 Series Processors with Radeon\u2122 Graphics",
          "vendor": "AMD",
          "versions": [
            {
              "status": "affected",
              "version": "various "
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "platforms": [
            "Windows",
            "x86"
          ],
          "product": "Ryzen\u2122 7040 Series Processors with Radeon\u2122 Graphics",
          "vendor": "AMD",
          "versions": [
            {
              "status": "affected",
              "version": "various "
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "platforms": [
            "Windows",
            "x86"
          ],
          "product": "Ryzen\u2122 7000 Series Processors with Radeon\u2122 Graphics",
          "vendor": "AMD",
          "versions": [
            {
              "status": "affected",
              "version": "various "
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "platforms": [
            "Windows",
            "x86"
          ],
          "product": "Ryzen\u2122 6000 Series Processors with Radeon\u2122 Graphics",
          "vendor": "AMD",
          "versions": [
            {
              "status": "affected",
              "version": "various "
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "platforms": [
            "Windows",
            "x86"
          ],
          "product": "Ryzen\u2122 7035 Series Processors with Radeon\u2122 Graphics",
          "vendor": "AMD",
          "versions": [
            {
              "status": "affected",
              "version": "various "
            }
          ]
        }
      ],
      "datePublic": "2023-10-16T17:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\n\n\n\n\u003cspan style=\"background-color: rgb(248, 249, 250);\"\u003eAn improper privilege management in the AMD Radeon\u2122\u003c/span\u003e\u0026nbsp;\u003cspan style=\"background-color: rgb(248, 249, 250);\"\u003eGraphics driver may allow an authenticated attacker to craft an IOCTL request to gain I/O control over arbitrary hardware ports or physical addresses resulting in a potential arbitrary code execution.\u003c/span\u003e\n\n\n\n"
            }
          ],
          "value": "\n\n\nAn improper privilege management in the AMD Radeon\u2122\u00a0Graphics driver may allow an authenticated attacker to craft an IOCTL request to gain I/O control over arbitrary hardware ports or physical addresses resulting in a potential arbitrary code execution.\n\n\n\n"
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-10-17T13:26:21.731Z",
        "orgId": "b58fc414-a1e4-4f92-9d70-1add41838648",
        "shortName": "AMD"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-6009"
        }
      ],
      "source": {
        "advisory": "\u202f\u202fAMD-SB-6009",
        "discovery": "EXTERNAL"
      },
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "b58fc414-a1e4-4f92-9d70-1add41838648",
    "assignerShortName": "AMD",
    "cveId": "CVE-2023-20598",
    "datePublished": "2023-10-17T13:26:21.731Z",
    "dateReserved": "2022-10-27T18:53:39.763Z",
    "dateUpdated": "2024-08-02T09:05:36.253Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

BDU:2023-07909 (CVE-2023-20598)

CVE-2023-20598 (GCVE-0-2023-20598)

Tags

Sightings

Nomenclature

Related by attack behaviour