CVE-2023-20589
high-risk
Published 2023-08-08
An attacker with specialized hardware and physical access to an impacted device may be able to perform a voltage fault injection attack resulting in compromise of the ASP secure boot potentially leading to arbitrary code execution.
Do I need to act?
-
0.11% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
6
CVSS 6.8/10
Medium
PHYSICAL
/ LOW complexity
Affected Products (20)
Ryzen 5 Pro 3400G Firmware
Ryzen 5 Pro 3400Ge Firmware
Ryzen 5 Pro 3350G Firmware
Ryzen 5 Pro 3350Ge Firmware
Ryzen 3 Pro 3200G Firmware
Ryzen 3 3200G Firmware
Ryzen 3 3200Ge Firmware
Ryzen 3 Pro 3200Ge Firmware
Ryzen 9 3900Xt Firmware
Ryzen 9 3900 Firmware
Ryzen 5 3500X Firmware
Affected Vendors
References (2)
53
/ 100
high-risk
Severity
22/34 · High
Exploitability
0/34 · Minimal
Exposure
31/34 · Critical