CVE-2023-20589: vulnerability in Ryzen™ PRO 5000 Series Desktop Processors
fTPM Voltage Fault Injection
Published · Updated
Follow this CVE+ Monitor AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics+ Monitor AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 0.6%
An attacker with specialized hardware and physical access to an impacted device may be able to perform a voltage fault injection attack resulting in compromise of the ASP secure boot potentially leading to arbitrary code execution.
Affected products
Ryzen™ PRO 5000 Series Desktop ProcessorsAMD · Athlon™ 3000 Series Mobile Processors with Radeon™ GraphicsAMD · Athlon™ 3000 Series Processors with Radeon™ GraphicsAMD · Athlon™ PRO 3000 Series Processors with Radeon™ Vega GraphicsAMD · Ryzen™ 3000 Series Desktop ProcessorsAMD · Ryzen™ 3000 Series Desktop Processors with Radeon™ GraphicsAMD · Ryzen™ 4000 Series Desktop Processors with Radeon™ GraphicsAMD · Ryzen™ 5000 Series Desktop ProcessorsAMD · Ryzen™ 5000 Series Desktop Processors with Radeon™ GraphicsAMD · Ryzen™ 5000 Series Processors with Radeon™ GraphicsAMD · Ryzen™ 6000 Series Processors with Radeon™ GraphicsAMD · Ryzen™ 7020 Series Processors with Radeon™ GraphicsAMD · Ryzen™ 7030 Series Processors with Radeon™ GraphicsAMD · Ryzen™ 7035 Series Processors with Radeon™ GraphicsAMD · Ryzen™ PRO 3000 Series Desktop ProcessorsAMD · Ryzen™ PRO 3000 Series Processors with Radeon™ Vega GraphicsAMD · Ryzen™ PRO 4000 Series Desktop ProcessorsAMD · Ryzen™ PRO 5000 Series ProcessorsAMD · Ryzen™ PRO 6000 Series ProcessorsAMD · Ryzen™ PRO 7030 Series ProcessorsAMD · Ryzen™ Threadripper™ 2000 Series ProcessorsAMD · Ryzen™ Threadripper™ 3000 Series ProcessorsAMD · Ryzen™ Threadripper™ 5000 Series ProcessorsRelated CVEs — Ryzen™ PRO 5000 Series Desktop Processors
In the same product, most dangerous first.