CVE-2023-20598

EPSS 1.47%
Veröffentlicht 17.10.2023 14:15:09
Zuletzt bearbeitet 21.11.2024 07:41:12
Quelle psirt@amd.com
Teams Watchlist Login
Unerledigt Login



An improper privilege management in the AMD Radeon™ Graphics driver may allow an authenticated attacker to craft an IOCTL request to gain I/O control over arbitrary hardware ports or physical addresses resulting in a potential arbitrary code execution.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 4

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Amd ≫ Radeon Software SwEditionadrenalin Version < 23.9.2

   Amd ≫ Radeon Rx 5300 Version-
   Amd ≫ Radeon Rx 5300 Xt Version-
   Amd ≫ Radeon Rx 5300m Version-
   Amd ≫ Radeon Rx 5500 Version-
   Amd ≫ Radeon Rx 5500 Xt Version-
   Amd ≫ Radeon Rx 5500m Version-
   Amd ≫ Radeon Rx 5600 Version-
   Amd ≫ Radeon Rx 5600 Xt Version-
   Amd ≫ Radeon Rx 5600m Version-
   Amd ≫ Radeon Rx 5700 Version-
   Amd ≫ Radeon Rx 5700 Xt Version-
   Amd ≫ Radeon Rx 5700m Version-
   Amd ≫ Radeon Rx 6300m Version-
   Amd ≫ Radeon Rx 6400 Version-
   Amd ≫ Radeon Rx 6450m Version-
   Amd ≫ Radeon Rx 6500 Xt Version-
   Amd ≫ Radeon Rx 6500m Version-
   Amd ≫ Radeon Rx 6550m Version-
   Amd ≫ Radeon Rx 6550s Version-
   Amd ≫ Radeon Rx 6600 Version-
   Amd ≫ Radeon Rx 6600 Xt Version-
   Amd ≫ Radeon Rx 6600m Version-
   Amd ≫ Radeon Rx 6600s Version-
   Amd ≫ Radeon Rx 6650 Xt Version-
   Amd ≫ Radeon Rx 6650m Version-
   Amd ≫ Radeon Rx 6650m Xt Version-
   Amd ≫ Radeon Rx 6700 Version-
   Amd ≫ Radeon Rx 6700 Xt Version-
   Amd ≫ Radeon Rx 6700m Version-
   Amd ≫ Radeon Rx 6700s Version-
   Amd ≫ Radeon Rx 6750 Gre 10gb Version-
   Amd ≫ Radeon Rx 6750 Gre 12gb Version-
   Amd ≫ Radeon Rx 6750 Xt Version-
   Amd ≫ Radeon Rx 6800 Version-
   Amd ≫ Radeon Rx 6800 Xt Version-
   Amd ≫ Radeon Rx 6800s Version-
   Amd ≫ Radeon Rx 6900 Xt Version-
   Amd ≫ Radeon Rx 6950 Xt Version-
   Amd ≫ Radeon Rx 7600 Version-
   Amd ≫ Radeon Rx 7600m Version-
   Amd ≫ Radeon Rx 7600m Xt Version-
   Amd ≫ Radeon Rx 7600s Version-
   Amd ≫ Radeon Rx 7700 Xt Version-
   Amd ≫ Radeon Rx 7700s Version-
   Amd ≫ Radeon Rx 7800 Xt Version-
   Amd ≫ Radeon Rx 7900 Gre Version-
   Amd ≫ Radeon Rx 7900 Xt Version-
   Amd ≫ Radeon Rx 7900 Xtx Version-
   Amd ≫ Radeon Rx 7900m Version-

Amd ≫ Radeon Software SwEditionpro Version < 23.q4

   Amd ≫ Radeon Pro W5500 Version-
   Amd ≫ Radeon Pro W5700 Version-
   Amd ≫ Radeon Pro W6300 Version-
   Amd ≫ Radeon Pro W6400 Version-
   Amd ≫ Radeon Pro W6600 Version-
   Amd ≫ Radeon Pro W6800 Version-
   Amd ≫ Radeon Pro W7500 Version-
   Amd ≫ Radeon Pro W7600 Version-
   Amd ≫ Radeon Pro W7800 Version-
   Amd ≫ Radeon Pro W7900 Version-

Amd ≫ Radeon Software SwEditionadrenalin Version < 23.9.2

   Amd ≫ Ryzen 3 7320u Version-
   Amd ≫ Ryzen 3 7335u Version-
   Amd ≫ Ryzen 3 7440u Version-
   Amd ≫ Ryzen 5 6600h Version-
   Amd ≫ Ryzen 5 6600hs Version-
   Amd ≫ Ryzen 5 6600u Version-
   Amd ≫ Ryzen 5 7500f Version-
   Amd ≫ Ryzen 5 7520u Version-
   Amd ≫ Ryzen 5 7535hs Version-
   Amd ≫ Ryzen 5 7535u Version-
   Amd ≫ Ryzen 5 7540u Version-
   Amd ≫ Ryzen 5 7600 Version-
   Amd ≫ Ryzen 5 7600x Version-
   Amd ≫ Ryzen 5 7640h Version-
   Amd ≫ Ryzen 5 7640u Version-
   Amd ≫ Ryzen 5 7645hx Version-
   Amd ≫ Ryzen 5 Pro 7640hs Version-
   Amd ≫ Ryzen 5 Pro 7645 Version-
   Amd ≫ Ryzen 7 6800h Version-
   Amd ≫ Ryzen 7 6800hs Version-
   Amd ≫ Ryzen 7 6800u Version-
   Amd ≫ Ryzen 7 7700 Version-
   Amd ≫ Ryzen 7 7700x Version-
   Amd ≫ Ryzen 7 7735hs Version-
   Amd ≫ Ryzen 7 7735u Version-
   Amd ≫ Ryzen 7 7736u Version-
   Amd ≫ Ryzen 7 7745hx Version-
   Amd ≫ Ryzen 7 7800x3d Version-
   Amd ≫ Ryzen 7 7840h Version-
   Amd ≫ Ryzen 7 7840u Version-
   Amd ≫ Ryzen 7 Pro 7745 Version-
   Amd ≫ Ryzen 7 Pro 7840hs Version-
   Amd ≫ Ryzen 9 6900hs Version-
   Amd ≫ Ryzen 9 6900hx Version-
   Amd ≫ Ryzen 9 6980hs Version-
   Amd ≫ Ryzen 9 6980hx Version-
   Amd ≫ Ryzen 9 7845hx Version-
   Amd ≫ Ryzen 9 7900 Version-
   Amd ≫ Ryzen 9 7900x Version-
   Amd ≫ Ryzen 9 7900x3d Version-
   Amd ≫ Ryzen 9 7940h Version-
   Amd ≫ Ryzen 9 7945hx Version-
   Amd ≫ Ryzen 9 7945hx3d Version-
   Amd ≫ Ryzen 9 7950x Version-
   Amd ≫ Ryzen 9 7950x3d Version-
   Amd ≫ Ryzen 9 Pro 7940hs Version-
   Amd ≫ Ryzen 9 Pro 7945 Version-

Amd ≫ Radeon Software SwEditionpro Version < 23.q4

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.47%	0.8

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.8	1.8	5.9	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
134c704f-9b21-4f2e-91b3-4a467353bcc0	7.8	1.8	5.9	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-269 Improper Privilege Management

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-6009

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2023-20598

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2023-20598

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2023-20598

EUVD