Lucene search

K
cvelistAMDCVELIST:CVE-2023-20512
HistoryAug 13, 2024 - 4:52 p.m.

CVE-2023-20512

2024-08-1316:52:33
AMD
www.cve.org
4
aes key
pmfw
privileged attacker
internal debug information leakage

CVSS3

1.9

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:N

EPSS

0

Percentile

9.5%

A hardcoded AES key in PMFW may result in a privileged attacker gaining access to the key, potentially resulting in internal debug information leakage.

CNA Affected

[
  {
    "defaultStatus": "affected",
    "product": "AMD Radeonβ„’ RX 6000 Series Graphics Cards",
    "vendor": "AMD",
    "versions": [
      {
        "status": "unaffected",
        "version": "AMD Software:  Adrenalin Edition 23.12.1 (23.30.13.01)"
      }
    ]
  },
  {
    "defaultStatus": "affected",
    "product": "AMD Radeonβ„’ PRO W6000 Series Graphics Cards",
    "vendor": "AMD",
    "versions": [
      {
        "status": "unaffected",
        "version": "AMD Software:  PRO Edition 23.Q4 (23.30.13.03)"
      }
    ]
  }
]

CVSS3

1.9

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:N

EPSS

0

Percentile

9.5%

Related for CVELIST:CVE-2023-20512