CVE-2023-20589 fTPM Voltage Fault Injection

2023-08-0817:04:17
AMD
www.cve.org
cve-2023-20589
hardware attack
physical access
6.9 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
23.2%
JSON
An attacker with specialized hardware and physical access to an impacted device may be able to perform a voltage fault injection attack resulting in compromise of the ASP secure boot potentially leading to arbitrary code execution.
CNA Affected

[
  {
    "defaultStatus": "affected",
    "packageName": " ",
    "platforms": [
      "x86"
    ],
    "product": "Ryzen™ 3000 Series Desktop Processors",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various "
      }
    ]
  },
  {
    "defaultStatus": "affected",
    "packageName": " ",
    "platforms": [
      "x86"
    ],
    "product": "Ryzen™ PRO 3000 Series Desktop Processors",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various "
      }
    ]
  },
  {
    "defaultStatus": "affected",
    "packageName": " ",
    "platforms": [
      "x86"
    ],
    "product": "Ryzen™ 3000 Series Desktop Processors with Radeon™ Graphics",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various "
      }
    ]
  },
  {
    "defaultStatus": "affected",
    "packageName": " ",
    "platforms": [
      "x86"
    ],
    "product": "Ryzen™ PRO 3000 Series Processors with Radeon™ Vega Graphics",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various "
      }
    ]
  },
  {
    "defaultStatus": "affected",
    "packageName": " ",
    "platforms": [
      "x86"
    ],
    "product": "Athlon™ 3000 Series Processors with Radeon™ Graphics ",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various "
      }
    ]
  },
  {
    "defaultStatus": "affected",
    "packageName": " ",
    "platforms": [
      "x86"
    ],
    "product": "Athlon™ PRO 3000 Series Processors with Radeon™ Vega Graphics",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various "
      }
    ]
  },
  {
    "defaultStatus": "affected",
    "packageName": " ",
    "platforms": [
      "x86"
    ],
    "product": "Ryzen™ 4000 Series Desktop Processors with Radeon™ Graphics",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various "
      }
    ]
  },
  {
    "defaultStatus": "affected",
    "packageName": " ",
    "platforms": [
      "x86"
    ],
    "product": "Ryzen™ PRO 4000 Series Desktop Processors",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various "
      }
    ]
  },
  {
    "defaultStatus": "affected",
    "packageName": " ",
    "platforms": [
      "x86"
    ],
    "product": "Ryzen™ 5000 Series Desktop Processors ",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various "
      }
    ]
  },
  {
    "defaultStatus": "affected",
    "packageName": " ",
    "platforms": [
      "x86"
    ],
    "product": "Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various "
      }
    ]
  },
  {
    "defaultStatus": "affected",
    "packageName": "AGESA",
    "platforms": [
      "x86"
    ],
    "product": "Ryzen™ PRO 5000 Series Desktop Processors",
    "vendor": " ",
    "versions": [
      {
        "status": "affected",
        "version": "various "
      }
    ]
  },
  {
    "defaultStatus": "affected",
    "packageName": " ",
    "platforms": [
      "x86"
    ],
    "product": "Ryzen™ Threadripper™ 2000 Series Processors ",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various "
      }
    ]
  },
  {
    "defaultStatus": "affected",
    "packageName": " ",
    "platforms": [
      "x86"
    ],
    "product": " Ryzen™ Threadripper™ 5000 Series Processors",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various "
      }
    ]
  },
  {
    "defaultStatus": "affected",
    "packageName": " ",
    "platforms": [
      "x86"
    ],
    "product": "Ryzen™ Threadripper™ 3000 Series Processors",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various "
      }
    ]
  },
  {
    "defaultStatus": "affected",
    "packageName": " ",
    "platforms": [
      "x86"
    ],
    "product": "Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various "
      }
    ]
  },
  {
    "defaultStatus": "affected",
    "packageName": " ",
    "platforms": [
      "x86"
    ],
    "product": "Ryzen™ 5000 Series Processors with Radeon™ Graphics",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various "
      }
    ]
  },
  {
    "defaultStatus": "affected",
    "packageName": " ",
    "platforms": [
      "x86"
    ],
    "product": "Ryzen™ PRO 5000 Series Processors",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various "
      }
    ]
  },
  {
    "defaultStatus": "affected",
    "packageName": " ",
    "platforms": [
      "x86"
    ],
    "product": "Ryzen™ 6000 Series Processors with Radeon™ Graphics",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various "
      }
    ]
  },
  {
    "defaultStatus": "affected",
    "packageName": " ",
    "platforms": [
      "x86"
    ],
    "product": "Ryzen™ PRO 6000 Series Processors",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various "
      }
    ]
  },
  {
    "defaultStatus": "affected",
    "packageName": " ",
    "platforms": [
      "x86"
    ],
    "product": "Ryzen™ 7020 Series Processors with Radeon™ Graphics",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various "
      }
    ]
  },
  {
    "defaultStatus": "affected",
    "packageName": " ",
    "platforms": [
      "x86"
    ],
    "product": "Ryzen™ 7030 Series Processors with Radeon™ Graphics",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various "
      }
    ]
  },
  {
    "defaultStatus": "affected",
    "packageName": " ",
    "platforms": [
      "x86"
    ],
    "product": "Ryzen™ PRO 7030 Series Processors",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various "
      }
    ]
  },
  {
    "defaultStatus": "affected",
    "packageName": " ",
    "platforms": [
      "x86"
    ],
    "product": "Ryzen™ 7035 Series Processors with Radeon™ Graphics ",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various "
      }
    ]
  }
]