Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
vulnrichmentAMDVULNRICHMENT:CVE-2023-20598
HistoryOct 17, 2023 - 1:26 p.m.

CVE-2023-20598

2023-10-1713:26:21
AMD
github.com
4
amd
radeon
graphics driver
privilege management
arbitrary code execution
cve-2023-20598

AI Score

7.5

Confidence

Low

SSVC

Exploitation

poc

Automatable

no

Technical Impact

total

JSON

An improper privilege management in the AMD Radeon™ Graphics driver may allow an authenticated attacker to craft an IOCTL request to gain I/O control over arbitrary hardware ports or physical addresses resulting in a potential arbitrary code execution.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:h:amd:radeon_pro_w5500:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:amd:radeon_pro_w5500x:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:amd:radeon_pro_w5700:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:amd:radeon_pro_w5700x:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:amd:radeon_pro_w6300:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:amd:radeon_pro_w6300m:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:amd:radeon_pro_w6400:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:amd:radeon_pro_w6500m:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:amd:radeon_pro_w6600:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:amd:radeon_pro_w6600m:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:amd:radeon_pro_w6600x:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:amd:radeon_pro_w6800:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:amd:radeon_pro_w6800x:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:amd:radeon_pro_w6800x_duo:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:amd:radeon_pro_w6900x:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:amd:radeon_pro_w7500:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:amd:radeon_pro_w7600:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:amd:radeon_pro_w7800:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:amd:radeon_pro_w7900:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:amd:radeon_rx_7600:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:amd:radeon_rx_7600m:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:amd:radeon_rx_7600m_xt:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:amd:radeon_rx_7600s:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:amd:radeon_rx_7600xt:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:amd:radeon_rx_7700s:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:amd:radeon_rx_7700xt:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:amd:radeon_rx_7700_xt:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:amd:radeon_rx_7800xt:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:amd:radeon_rx_7800_xt:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:amd:radeon_rx_7900_gre:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:amd:radeon_rx_7900m:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:amd:radeon_rx_7900xt:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:amd:radeon_rx_7900_xt:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:amd:radeon_rx_7900xtx:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:amd:radeon_rx_7900_xtx:-:*:*:*:*:*:*:*",
      "cpe:2.3:o:amd:radeon_rx_7900xtx_firmware:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:amd:radeon_rx_6900_xt:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:amd:radeon_rx_6300m:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:amd:radeon_rx_6400:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:amd:radeon_rx_6450m:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:amd:radeon_rx_6500m:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:amd:radeon_rx_6500_xt:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:amd:radeon_rx_6550m:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:amd:radeon_rx_6550s:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:amd:radeon_rx_6600:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:amd:radeon_rx_6600m:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:amd:radeon_rx_6600s:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:amd:radeon_rx_6600_xt:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:amd:radeon_rx_6650m:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:amd:radeon_rx_6650m_xt:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:amd:radeon_rx_6650_xt:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:amd:radeon_rx_6700:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:amd:radeon_rx_6700m:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:amd:radeon_rx_6700s:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:amd:radeon_rx_6700_xt:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:amd:radeon_rx_6750_gre_10gb:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:amd:radeon_rx_6750_gre_12gb:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:amd:radeon_rx_6750_xt:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:amd:radeon_rx_6800:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:amd:radeon_rx_6800m:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:amd:radeon_rx_6800s:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:amd:radeon_rx_5700:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:amd:radeon_rx_5700_xt:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:amd:radeon_rx_5600:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:amd:radeon_rx_5600_xt:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:amd:radeon_rx_5500:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:amd:radeon_rx_5500_xt:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:amd:radeon_rx_5300:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:amd:radeon_rx_5300_xt:-:*:*:*:*:*:*:*"
    ],
    "vendor": "amd",
    "product": "radeon_rx_5300_xt",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "*"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:h:amd:ryzen_7_7700:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:amd:ryzen_7_7700x:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:amd:ryzen_7_7735hs:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:amd:ryzen_7_7735u:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:amd:ryzen_7_7736u:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:amd:ryzen_7_7745hx:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:amd:ryzen_7_7800x3d:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:amd:ryzen_7_7840h:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:amd:ryzen_7_7840u:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:amd:ryzen_7_pro_7745:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:amd:ryzen_7_pro_7840h:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:amd:ryzen_7_pro_7840hs:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:amd:ryzen_7_6800hs:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:amd:ryzen_7_6800h:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:amd:ryzen_3_7320u:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:amd:ryzen_3_7335u:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:amd:ryzen_3_7440u:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:amd:ryzen_5_6600h:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:amd:ryzen_5_6600hs:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:amd:ryzen_5_6600u:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:amd:ryzen_5_7500f:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:amd:ryzen_5_7520u:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:amd:ryzen_5_7535hs:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:amd:ryzen_5_7535u:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:amd:ryzen_5_7545u:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:amd:ryzen_5_7600:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:amd:ryzen_5_7600x:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:amd:ryzen_5_7640h:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:amd:ryzen_5_7640u:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:amd:ryzen_5_7645hx:-:*:*:*:*:*:*:*"
    ],
    "vendor": "amd",
    "product": "ryzen_5_7645hx",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "*",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:h:amd:ryzen_9_6980hs:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:amd:ryzen_9_6980hx:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:amd:ryzen_9_7845hx:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:amd:ryzen_9_7900:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:amd:ryzen_9_7900x:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:amd:ryzen_9_7900x3d:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:amd:ryzen_9_7945hx:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:amd:ryzen_9_7945hx3d:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:amd:ryzen_9_7950x:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:amd:ryzen_9_7950x3d:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:amd:ryzen_9_pro_7940h:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:amd:ryzen_9_pro_7940hs:-:*:*:*:*:*:*:*",
      "cpe:2.3:h:amd:ryzen_9_pro_7945:-:*:*:*:*:*:*:*"
    ],
    "vendor": "amd",
    "product": "ryzen_9_pro_7945",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "*",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  }
]

Related

cve 1
cvelist 1
prion 1
nvd 1
amd 1
redhatcve 1
thn 1
cve
cve
CVE-2023-20598
2023-10-17 14:15:09
cvelist
cvelist
CVE-2023-20598
2023-10-17 13:26:21
prion
prion
Input validation
2023-10-17 14:15:00
nvd
nvd
CVE-2023-20598
2023-10-17 14:15:09
amd
amd
AMD Radeon™ Graphics Kernel Driver Privilege Management Vulnerability
2023-10-16 00:00:00
redhatcve
redhatcve
CVE-2023-20598
2023-10-26 01:43:17
thn
thn
Researchers Find 34 Windows Drivers Vulnerable to Full Device Takeover
2023-11-02 08:59:00

AI Score

7.5

Confidence

Low

SSVC

Exploitation

poc

Automatable

no

Technical Impact

total

JSON
Related for VULNRICHMENT:CVE-2023-20598
cve1cvelist1prion1nvd1amd1redhatcve1thn1