Lucene search

[email protected]NVD:CVE-2023-20567

HistoryNov 14, 2023 - 7:15 p.m.

CVE-2023-20567

2023-11-1419:15:15

CWE-347

[email protected]

web.nvd.nist.gov

improper signature verification

radeon rx vega m

graphics driver

windows

admin privileges

amdsoftwareinstaller.exe

file signature

arbitrary code execution

cve-2023-20567

6.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

0.0004 Low

EPSS

Percentile

5.1%

JSON

Improper signature verification of RadeonTM RX Vega M Graphics driver for Windows may allow an attacker with admin privileges to launch AMDSoftwareInstaller.exe without validating the file signature potentially leading to arbitrary code execution.

Affected configurations

NVD

Node

intelradeon_rx_vega_m_firmwareRange<23.10.01.46

AND

intelcore_i5-8305gMatch-

intelcore_i7-8705gMatch-

intelcore_i7-8706gMatch-

intelcore_i7-8709gMatch-

intelnuc_8_enthusiast_nuc8i7hnkqcMatch-

intelnuc_8_enthusiast_nuc8i7hvkvaMatch-

intelnuc_8_enthusiast_nuc8i7hvkvawMatch-

intelnuc_kit_nuc8i7hnkMatch-

intelnuc_kit_nuc8i7hvkMatch-

Node

amdradeon_softwareRange<23.7.1adrenalin

AND

amdradeon_rx_5300Match-

amdradeon_rx_5300_xtMatch-

amdradeon_rx_5300mMatch-

amdradeon_rx_5500Match-

amdradeon_rx_5500_xtMatch-

amdradeon_rx_5500mMatch-

amdradeon_rx_5600Match-

amdradeon_rx_5600_xtMatch-

amdradeon_rx_5600mMatch-

amdradeon_rx_5700Match-

amdradeon_rx_5700_xtMatch-

amdradeon_rx_5700mMatch-

amdradeon_rx_6300mMatch-

amdradeon_rx_6400Match-

amdradeon_rx_6450mMatch-

amdradeon_rx_6500_xtMatch-

amdradeon_rx_6500mMatch-

amdradeon_rx_6550mMatch-

amdradeon_rx_6550sMatch-

amdradeon_rx_6600Match-

amdradeon_rx_6600_xtMatch-

amdradeon_rx_6600mMatch-

amdradeon_rx_6600sMatch-

amdradeon_rx_6650_xtMatch-

amdradeon_rx_6650mMatch-

amdradeon_rx_6650m_xtMatch-

amdradeon_rx_6700Match-

amdradeon_rx_6700_xtMatch-

amdradeon_rx_6700mMatch-

amdradeon_rx_6700sMatch-

amdradeon_rx_6800Match-

amdradeon_rx_6800_xtMatch-

amdradeon_rx_6800mMatch-

amdradeon_rx_6800sMatch-

amdradeon_rx_6850m_xtMatch-

amdradeon_rx_6900_xtMatch-

amdradeon_rx_6950_xtMatch-

amdradeon_rx_7600Match-

amdradeon_rx_7600mMatch-

amdradeon_rx_7600m_xtMatch-

amdradeon_rx_7600sMatch-

amdradeon_rx_7700_xtMatch-

amdradeon_rx_7700sMatch-

amdradeon_rx_7800_xtMatch-

amdradeon_rx_7900_greMatch-

amdradeon_rx_7900_xtMatch-

amdradeon_rx_7900_xtxMatch-

amdradeon_rx_7900mMatch-

Node

amdradeon_softwareRange<23.q3pro

AND

amdradeon_pro_w5500Match-

amdradeon_pro_w5500xMatch-

amdradeon_pro_w5700Match-

amdradeon_pro_w5700xMatch-

amdradeon_pro_w6300Match-

amdradeon_pro_w6300mMatch-

amdradeon_pro_w6400Match-

amdradeon_pro_w6500mMatch-

amdradeon_pro_w6600Match-

amdradeon_pro_w6600mMatch-

amdradeon_pro_w6600xMatch-

amdradeon_pro_w6800Match-

amdradeon_pro_w6800xMatch-

amdradeon_pro_w6800x_duoMatch-

amdradeon_pro_w6900xMatch-

amdradeon_pro_w7500Match-

amdradeon_pro_w7600Match-

amdradeon_pro_w7800Match-

Node

amdradeon_rx_vega_56_firmwareMatch-

AND

amdradeon_rx_vega_56Match-

Node

amdradeon_rx_vega_64_firmwareMatch-

AND

amdradeon_rx_vega_64Match-

Node

amdradeon_pro_vega_56_firmwareMatch-

AND

amdradeon_pro_vega_56Match-

Node

amdradeon_pro_vega_64_firmwareMatch-

AND

amdradeon_pro_vega_64Match-

Node

amdryzen_3_3015ceMatch-

amdryzen_3_3015eMatch-

amdryzen_3_4100Match-

amdryzen_3_4300gMatch-

amdryzen_3_4300geMatch-

amdryzen_3_4300uMatch-

amdryzen_3_5300gMatch-

amdryzen_3_5300geMatch-

amdryzen_3_5300uMatch-

amdryzen_5_4500Match-

amdryzen_5_4500uMatch-

amdryzen_5_4600gMatch-

amdryzen_5_4600geMatch-

amdryzen_5_4600hMatch-

amdryzen_5_4600hsMatch-

amdryzen_5_4600uMatch-

amdryzen_5_4680uMatch-

amdryzen_5_5500hMatch-

amdryzen_5_5500uMatch-

amdryzen_5_5600gMatch-

amdryzen_5_5600geMatch-

amdryzen_5_pro_3200gMatch-

amdryzen_5_pro_3200geMatch-

amdryzen_5_pro_3350gMatch-

amdryzen_5_pro_3350geMatch-

amdryzen_5_pro_3400gMatch-

amdryzen_5_pro_3400geMatch-

amdryzen_7_4700gMatch-

amdryzen_7_4700geMatch-

amdryzen_7_4700uMatch-

amdryzen_7_4800hMatch-

amdryzen_7_4800hsMatch-

amdryzen_7_4980uMatch-

amdryzen_7_5700gMatch-

amdryzen_7_5700geMatch-

amdryzen_7_5700uMatch-

amdryzen_9_4900hMatch-

amdryzen_9_4900hsMatch-

AND

amdradeon_softwareRange<23.7.1adrenalin

amdradeon_softwareRange<23.q3pro

References

www.amd.com/en/corporate/product-security/bulletin/AMD-SB-6003

www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00971.html

6.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

0.0004 Low

EPSS

Percentile

5.1%

JSON

Related for NVD:CVE-2023-20567

cvelist1 prion1 cve1 intel1 amd1 hp1