Lucene search

[email protected]NVD:CVE-2023-20568

HistoryNov 14, 2023 - 7:15 p.m.

CVE-2023-20568

2023-11-1419:15:15

CWE-347

[email protected]

web.nvd.nist.gov

signature verification

radeon rx vega m graphics

windows

admin privileges

radeoninstaller.exe

arbitrary code execution

6.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

0.0004 Low

EPSS

Percentile

5.1%

JSON

Improper signature verification of RadeonTM RX Vega M Graphics driver for Windows may allow an attacker with admin privileges to launch RadeonInstaller.exe without validating the file signature potentially leading to arbitrary code execution.

Affected configurations

NVD

Node

intelcore_i5-8305gMatch-

intelcore_i7-8705gMatch-

intelcore_i7-8706gMatch-

intelcore_i7-8709gMatch-

intelnuc_8_enthusiast_nuc8i7hnkqcMatch-

intelnuc_8_enthusiast_nuc8i7hvkvaMatch-

intelnuc_8_enthusiast_nuc8i7hvkvawMatch-

intelnuc_kit_nuc8i7hnkMatch-

intelnuc_kit_nuc8i7hvkMatch-

AND

intelradeon_rx_vega_m_firmwareRange<23.10.01.46

Node

amdradeon_rx_5300Match-

amdradeon_rx_5300_xtMatch-

amdradeon_rx_5300mMatch-

amdradeon_rx_5500Match-

amdradeon_rx_5500_xtMatch-

amdradeon_rx_5500mMatch-

amdradeon_rx_5600Match-

amdradeon_rx_5600_xtMatch-

amdradeon_rx_5600mMatch-

amdradeon_rx_5700Match-

amdradeon_rx_5700_xtMatch-

amdradeon_rx_5700mMatch-

amdradeon_rx_6300mMatch-

amdradeon_rx_6400Match-

amdradeon_rx_6450mMatch-

amdradeon_rx_6500_xtMatch-

amdradeon_rx_6500mMatch-

amdradeon_rx_6550mMatch-

amdradeon_rx_6550sMatch-

amdradeon_rx_6600Match-

amdradeon_rx_6600_xtMatch-

amdradeon_rx_6600mMatch-

amdradeon_rx_6600sMatch-

amdradeon_rx_6650_xtMatch-

amdradeon_rx_6650mMatch-

amdradeon_rx_6650m_xtMatch-

amdradeon_rx_6700Match-

amdradeon_rx_6700_xtMatch-

amdradeon_rx_6700mMatch-

amdradeon_rx_6700sMatch-

amdradeon_rx_6800Match-

amdradeon_rx_6800_xtMatch-

amdradeon_rx_6800mMatch-

amdradeon_rx_6800sMatch-

amdradeon_rx_6850m_xtMatch-

amdradeon_rx_6900_xtMatch-

amdradeon_rx_6950_xtMatch-

amdradeon_rx_7600Match-

amdradeon_rx_7600mMatch-

amdradeon_rx_7600m_xtMatch-

amdradeon_rx_7600sMatch-

amdradeon_rx_7700_xtMatch-

amdradeon_rx_7700sMatch-

amdradeon_rx_7800_xtMatch-

amdradeon_rx_7900_greMatch-

amdradeon_rx_7900_xtMatch-

amdradeon_rx_7900_xtxMatch-

amdradeon_rx_7900mMatch-

AND

amdradeon_softwareRange<23.7.1adrenalin

Node

amdradeon_pro_w5500Match-

amdradeon_pro_w5500xMatch-

amdradeon_pro_w5700Match-

amdradeon_pro_w5700xMatch-

amdradeon_pro_w6300Match-

amdradeon_pro_w6300mMatch-

amdradeon_pro_w6400Match-

amdradeon_pro_w6500mMatch-

amdradeon_pro_w6600Match-

amdradeon_pro_w6600mMatch-

amdradeon_pro_w6600xMatch-

amdradeon_pro_w6800Match-

amdradeon_pro_w6800xMatch-

amdradeon_pro_w6800x_duoMatch-

amdradeon_pro_w6900xMatch-

amdradeon_pro_w7500Match-

amdradeon_pro_w7600Match-

amdradeon_pro_w7800Match-

AND

amdradeon_softwareRange<23.q3pro

Node

amdradeon_rx_vega_56Match-

AND

amdradeon_rx_vega_56_firmwareMatch-

Node

amdradeon_rx_vega_64Match-

AND

amdradeon_rx_vega_64_firmwareMatch-

Node

amdradeon_pro_vega_56Match-

AND

amdradeon_pro_vega_56_firmwareMatch-

Node

amdradeon_pro_vega_64Match-

AND

amdradeon_pro_vega_64_firmwareMatch-

Node

amdryzen_3_3015ceMatch-

amdryzen_3_3015eMatch-

amdryzen_3_4100Match-

amdryzen_3_4300gMatch-

amdryzen_3_4300geMatch-

amdryzen_3_4300uMatch-

amdryzen_3_5300gMatch-

amdryzen_3_5300geMatch-

amdryzen_3_5300uMatch-

amdryzen_5_4500Match-

amdryzen_5_4500uMatch-

amdryzen_5_4600gMatch-

amdryzen_5_4600geMatch-

amdryzen_5_4600hMatch-

amdryzen_5_4600hsMatch-

amdryzen_5_4600uMatch-

amdryzen_5_4680uMatch-

amdryzen_5_5500hMatch-

amdryzen_5_5500uMatch-

amdryzen_5_5600gMatch-

amdryzen_5_5600geMatch-

amdryzen_5_pro_3200gMatch-

amdryzen_5_pro_3200geMatch-

amdryzen_5_pro_3350gMatch-

amdryzen_5_pro_3350geMatch-

amdryzen_5_pro_3400gMatch-

amdryzen_5_pro_3400geMatch-

amdryzen_7_4700gMatch-

amdryzen_7_4700geMatch-

amdryzen_7_4700uMatch-

amdryzen_7_4800hMatch-

amdryzen_7_4800hsMatch-

amdryzen_7_4980uMatch-

amdryzen_7_5700gMatch-

amdryzen_7_5700geMatch-

amdryzen_7_5700uMatch-

amdryzen_9_4900hMatch-

amdryzen_9_4900hsMatch-

AND

amdradeon_softwareRange<23.7.1adrenalin

amdradeon_softwareRange<23.q3pro

References

www.amd.com/en/corporate/product-security/bulletin/AMD-SB-6003

www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00971.html

6.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

0.0004 Low

EPSS

Percentile

5.1%

JSON

Related for NVD:CVE-2023-20568

cve1 prion1 cvelist1 intel1 amd1 hp1