Lucene search
AMDVULNRICHMENT:CVE-2023-20512HistoryAug 13, 2024 - 4:52 p.m.
CVE-2023-20512
2024-08-1316:52:33
AMD
github.com
pmfw
aes key
vulnerability
privileged attacker
internal leakage
debug information
CVSS3
1.9
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:N
AI Score
6.5
Confidence
Low
SSVC
Exploitation
none
Automatable
no
Technical Impact
partial
A hardcoded AES key in PMFW may result in a privileged attacker gaining access to the key, potentially resulting in internal debug information leakage.
CNA Affected
[
{
"vendor": "AMD",
"product": "AMD Radeon™ RX 6000 Series Graphics Cards",
"versions": [
{
"status": "unaffected",
"version": "AMD Software: Adrenalin Edition 23.12.1 (23.30.13.01)"
}
],
"defaultStatus": "affected"
},
{
"vendor": "AMD",
"product": "AMD Radeon™ PRO W6000 Series Graphics Cards",
"versions": [
{
"status": "unaffected",
"version": "AMD Software: PRO Edition 23.Q4 (23.30.13.03)"
}
],
"defaultStatus": "affected"
}
]Related
cvelist
cvelist
CVE-2023-20512
2024-08-13 16:52:33
nvd
nvd
CVE-2023-20512
2024-08-13 17:15:18
cve
cve
CVE-2023-20512
2024-08-13 17:15:18
amd
amd
AMD Graphics Driver Vulnerabilities – August 2024
2024-08-13 00:00:00
CVSS3
1.9
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:N
AI Score
6.5
Confidence
Low
SSVC
Exploitation
none
Automatable
no
Technical Impact
partial
Related for VULNRICHMENT:CVE-2023-20512