Lucene search

K
cvelistAMDCVELIST:CVE-2023-31310
HistoryAug 13, 2024 - 4:54 p.m.

CVE-2023-31310

2024-08-1316:54:05
AMD
www.cve.org
3
input validation
pmfw
temperature command
integrity
availability

CVSS3

5

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L

EPSS

0

Percentile

9.5%

Improper input validation in Power Management Firmware (PMFW) may allow an attacker with privileges to send a malformed input for the β€œset temperature input selection” command, potentially resulting in a loss of integrity and/or availability.

CNA Affected

[
  {
    "defaultStatus": "affected",
    "product": "AMD Radeonβ„’ RX 6000 Series Graphics Cards",
    "vendor": "AMD",
    "versions": [
      {
        "status": "unaffected",
        "version": "AMD Software:  Adrenalin Edition 23.12.1 (23.30.13.01)"
      }
    ]
  },
  {
    "defaultStatus": "affected",
    "product": "AMD Radeonβ„’ PRO W6000 Series Graphics Cards",
    "vendor": "AMD",
    "versions": [
      {
        "status": "unaffected",
        "version": "AMD Software:  PRO Edition 23.Q4 (23.30.13.03)"
      }
    ]
  }
]

CVSS3

5

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L

EPSS

0

Percentile

9.5%

Related for CVELIST:CVE-2023-31310