Back to the CVE list
CVE-2023-20579

Improper access control in Amd Ryzen 7 5700g Firmware

CVSS score

6.0

EPSS probability

%0.2

Risk score

0.0

Published

2 y ago

OverviewPublic Exploits (0)NewsroomVulnerability Timeline
Patch status has not yet been verified

Resmî kaynaklarda yeterli kanıt bulunamadı. Bu sonuç “yama yok” anlamına gelmez.

Impact on My Inventory

Only the personal products you have added to your account are assessed; an organisation's inventory does not appear here.

Checking session…

Vulnerability description

DayBreach CVE AI Research

CVE-2023-20579 has vendor, distribution, patch and security-source records on file. We can compare them and prepare an explanation linked to the evidence.

Improper Access Control in the AMD SPI protection feature may allow a user with Ring0 (kernel mode) privileged access to bypass protections potentially resulting in loss of integrity and availability.

IMPACT: Affected Products and Software

Affected Products

The following products are affected by CVE-2023-20579 vulnerability. Where our threat engine knows the exact affected versions, they are listed below.

IDVENDORPRODUCTACTION
1amdryzen 7 5700g firmware View
2amdryzen 7 5700g View
3amdryzen 7 5700ge firmware View
4amdryzen 7 5700ge View
5amdryzen 5 5600g firmware View
6amdryzen 5 5600g View
7amdryzen 5 5600gt firmware View
8amdryzen 5 5600gt View
9amdryzen 5 5600ge firmware View
10amdryzen 5 5600ge View
11amdryzen 5 5500gt firmware View
12amdryzen 5 5500gt View
13amdryzen 3 5300g firmware View
14amdryzen 3 5300g View
15amdryzen 3 5300ge firmware View
16amdryzen 3 5300ge View
17amdryzen 5 7500f firmware View
18amdryzen 5 7500f View
19amdryzen 5 pro 7645 firmware View
20amdryzen 5 pro 7645 View
21amdryzen 5 7600x firmware View
22amdryzen 5 7600x View
23amdryzen 5 7600 firmware View
24amdryzen 5 7600 View
25amdryzen 5 7600x3d firmware View
26amdryzen 5 7600x3d View
27amdryzen 7 pro 7745 firmware View
28amdryzen 7 pro 7745 View
29amdryzen 7 7700 firmware View
30amdryzen 7 7700 View
31amdryzen 7 7700x firmware View
32amdryzen 7 7700x View
33amdryzen 7 7800x3d firmware View
34amdryzen 7 7800x3d View
35amdryzen 9 pro 7945 firmware View
36amdryzen 9 pro 7945 View
37amdryzen 9 7900 firmware View
38amdryzen 9 7900 View
39amdryzen 9 7900x firmware View
40amdryzen 9 7900x View
41amdryzen 9 7900x3d firmware View
42amdryzen 9 7900x3d View
43amdryzen 9 7950x firmware View
44amdryzen 9 7950x View
45amdryzen 9 7950x3d firmware View
46amdryzen 9 7950x3d View
47amdryzen threadripper 7960x firmware View
48amdryzen threadripper 7960x View
49amdryzen threadripper 7970x firmware View
50amdryzen threadripper 7970x View
51amdryzen threadripper 7980x firmware View
52amdryzen threadripper 7980x View
53amdryzen threadripper pro 7945wx firmware View
54amdryzen threadripper pro 7945wx View
55amdryzen threadripper pro 7955wx firmware View
56amdryzen threadripper pro 7955wx View
57amdryzen threadripper pro 7965wx firmware View
58amdryzen threadripper pro 7965wx View
59amdryzen threadripper pro 7975wx firmware View
60amdryzen threadripper pro 7975wx View
61amdryzen threadripper pro 7985wx firmware View
62amdryzen threadripper pro 7985wx View
63amdryzen threadripper pro 7995wx firmware View
64amdryzen threadripper pro 7995wx View
65amdryzen 7 4700g firmware View
66amdryzen 7 4700g View
67amdryzen 7 4700ge firmware View
68amdryzen 7 4700ge View
69amdryzen 5 4600g firmware View
70amdryzen 5 4600g View
71amdryzen 5 4600ge firmware View
72amdryzen 5 4600ge View
73amdryzen 3 4300g firmware View
74amdryzen 3 4300g View
75amdryzen 3 4300ge firmware View
76amdryzen 3 4300ge View
77amdryzen 9 4900h firmware View
78amdryzen 9 4900h View
79amdryzen 7 4800u firmware View
80amdryzen 7 4800u View
81amdryzen 7 4700u firmware View
82amdryzen 7 4700u View
83amdryzen 7 4800h firmware View
84amdryzen 7 4800h View
85amdryzen 5 4600u firmware View
86amdryzen 5 4600u View
87amdryzen 5 4500u firmware View
88amdryzen 5 4500u View
89amdryzen 5 4600h firmware View
90amdryzen 5 4600h View
91amdryzen 3 4300u firmware View
92amdryzen 3 4300u View
93amdryzen 9 5980hx firmware View
94amdryzen 9 5980hx View
95amdryzen 9 5980hs firmware View
96amdryzen 9 5980hs View
97amdryzen 7 5825u firmware View
98amdryzen 7 5825u View
99amdryzen 9 5900hx firmware View
100amdryzen 9 5900hx View
101amdryzen 9 5900hs firmware View
102amdryzen 9 5900hs View
103amdryzen 7 5825c firmware View
104amdryzen 7 5825c View
105amdryzen 7 5800h firmware View
106amdryzen 7 5800h View
107amdryzen 5 5625u firmware View
108amdryzen 5 5625u View
109amdryzen 7 5800hs firmware View
110amdryzen 7 5800hs View
111amdryzen 5 5625c firmware View
112amdryzen 5 5625c View
113amdryzen 5 5600h firmware View
114amdryzen 5 5600h View
115amdryzen 5 5600hs firmware View
116amdryzen 5 5600hs View
117amdryzen 7 5800u firmware View
118amdryzen 7 5800u View
119amdryzen 5 5600u firmware View
120amdryzen 5 5600u View
121amdryzen 5 5560u firmware View
122amdryzen 5 5560u View
123amdryzen 3 5425u firmware View
124amdryzen 3 5425u View
125amdryzen 3 5425c firmware View
126amdryzen 3 5425c View
127amdryzen 3 5400u firmware View
128amdryzen 3 5400u View
129amdryzen 3 5125c firmware View
130amdryzen 3 5125c View
131amdryzen 5 7520u firmware View
132amdryzen 5 7520u View
133amdryzen 3 7320u firmware View
134amdryzen 3 7320u View
135amdryzen 9 6980hx firmware View
136amdryzen 9 6980hx View
137amdryzen 9 6980hs firmware View
138amdryzen 9 6980hs View
139amdryzen 9 6900hx firmware View
140amdryzen 9 6900hx View
141amdryzen 9 6900hs firmware View
142amdryzen 9 6900hs View
143amdryzen 7 6800h firmware View
144amdryzen 7 6800h View
145amdryzen 7 6800hs firmware View
146amdryzen 7 6800hs View
147amdryzen 7 6800u firmware View
148amdryzen 7 6800u View
149amdryzen 5 6600h firmware View
150amdryzen 5 6600h View
151amdryzen 5 6600hs firmware View
152amdryzen 5 6600hs View
153amdryzen 5 6600u firmware View
154amdryzen 5 6600u View
155amdryzen 3 7335u firmware View
156amdryzen 3 7335u View
157amdryzen 5 7235h firmware View
158amdryzen 5 7235h View
159amdryzen 5 7235hs firmware View
160amdryzen 5 7235hs View
161amdryzen 5 7535u firmware View
162amdryzen 5 7535u View
163amdryzen 5 7535h firmware View
164amdryzen 5 7535h View
165amdryzen 5 7535hs firmware View
166amdryzen 5 7535hs View
167amdryzen 7 7435h firmware View
168amdryzen 7 7435h View
169amdryzen 7 7435hs firmware View
170amdryzen 7 7435hs View
171amdryzen 7 7735u firmware View
172amdryzen 7 7735u View
173amdryzen 7 7736u firmware View
174amdryzen 7 7736u View
175amdryzen 7 7735h firmware View
176amdryzen 7 7735h View
177amdryzen 7 7735hs firmware View
178amdryzen 7 7735hs View
179amdryzen 3 3250u firmware View
180amdryzen 3 3250u View
181amdryzen 3 3250c firmware View
182amdryzen 3 3250c View
183amdryzen 3 3200u firmware View
184amdryzen 3 3200u View
185amdryzen 7 3780u firmware View
186amdryzen 7 3780u View
187amdryzen 7 3750h firmware View
188amdryzen 7 3750h View
189amdryzen 7 3700c firmware View
190amdryzen 7 3700c View
191amdryzen 7 3700u firmware View
192amdryzen 7 3700u View
193amdryzen 5 3580u firmware View
194amdryzen 5 3580u View
195amdryzen 5 3550h firmware View
196amdryzen 5 3550h View
197amdryzen 5 3500c firmware View
198amdryzen 5 3500c View
199amdryzen 5 3500u firmware View
200amdryzen 5 3500u View
Total affected vendors: 1|Products: 200

RED HAT CSAF/VEX: Product Impact Check

Red Hat has not yet published a CSAF/VEX impact record for this CVE. This does not mean “not affected”.

SCORING: CVSS from Multiple Sources

CVSS Scores

The Common Vulnerability Scoring System is a standardised framework for assessing the severity of vulnerabilities in software and systems. We collect and display CVSS scores from several sources for each CVE.

SCOREVERSIONSEVERITYVECTORSOURCE
6.0CVSS V31MEDIUMCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:HNVD
3.4CVSS V31LOWCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:NNVD

Patch and Remediation Guide

Solution & Remediation Advisory

Patch status unknown

İncelenen resmî kaynaklarda yama durumu doğrulanamadı. Bu sonuç “yama yok” anlamına gelmez.

Confirm the affected product and version against the source evidence above.
Restrict access to internet-facing services and apply network segmentation.
Until a patch is confirmed, follow the vendor advisory; do not read an unknown status as “no patch”.
Monitor server logs and network endpoints for signs of anomalous execution.

Public exploit and active exploitation status

Verified exploit intelligence

No verified public PoC, exploit repository or Metasploit module has been found for this CVE yet.

Weakness Classification and Attack Patterns (CWE & CAPEC)

CWE - Common Weakness Enumeration

While CVE identifies specific instances of vulnerabilities, CWE categorises the common flaws or weaknesses that can lead to vulnerabilities. CVE-2023-20579 is associated with the following CWEs:

CWE-284: Common Weakness Enumeration Entry CWE-284

Common Attack Pattern Enumeration and Classification (CAPEC)

Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2023-20579 weaknesses.

CAPEC-66: SQL InjectionCAPEC-126: Path TraversalCAPEC-28: OS Command Injection

Attack Vector and Accessibility

ExposureYerel erişim
PermissionsHigh
UserGerekmiyor

Official Sources and Advisories

https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-7009vendor-advisory

CVSS Vector Radar Chart

6.0 / 10
Attack VectorLocalComplexityLowPrivilegesHighUser Interact.NoneConfidentialityLowIntegrityNoneAvailabilityHigh

Vulnerability Scoring Details

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H
Attack VectorLocal
Attack ComplexityLow
Privileges RequiredHigh privileges
User InteractionNone required
Confidentiality (Gizlilik)Low
Integrity (Bütünlük)None
Availability (Erişilebilirlik)High

Yama durumu bilinmiyor

İncelenen resmî kaynaklarda yama durumu doğrulanamadı. Bu sonuç “yama yok” anlamına gelmez.

Follow the vendor

A
amd logo
amd

Weakness Type (CWE & CAPEC)

CWE-284

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free keyDocumentation
curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2023-20579"