Lucene search
AMDCVE-2023-20512HistoryAug 13, 2024 - 5:15 p.m.
CVE-2023-20512
2024-08-1317:15:18
AMD
web.nvd.nist.gov
22
pmfw
hardcoded aes key
privileged attacker
information leakage
CVSS3
1.9
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:N
AI Score
6.7
Confidence
Low
EPSS
0
Percentile
9.5%
A hardcoded AES key in PMFW may result in a privileged attacker gaining access to the key, potentially resulting in internal debug information leakage.
CNA Affected
[
{
"defaultStatus": "affected",
"product": "AMD Radeon™ RX 6000 Series Graphics Cards",
"vendor": "AMD",
"versions": [
{
"status": "unaffected",
"version": "AMD Software: Adrenalin Edition 23.12.1 (23.30.13.01)"
}
]
},
{
"defaultStatus": "affected",
"product": "AMD Radeon™ PRO W6000 Series Graphics Cards",
"vendor": "AMD",
"versions": [
{
"status": "unaffected",
"version": "AMD Software: PRO Edition 23.Q4 (23.30.13.03)"
}
]
}
]Related
vulnrichment
vulnrichment
CVE-2023-20512
2024-08-13 16:52:33
cvelist
cvelist
CVE-2023-20512
2024-08-13 16:52:33
nvd
nvd
CVE-2023-20512
2024-08-13 17:15:18
amd
amd
AMD Graphics Driver Vulnerabilities – August 2024
2024-08-13 00:00:00
CVSS3
1.9
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:N
AI Score
6.7
Confidence
Low
EPSS
0
Percentile
9.5%
Related for CVE-2023-20512