CVE-2023-20589
fTPM Voltage Fault Injection
- State
- Published
- Severity
- Not scored
- Published
- Aug 8, 2023
- Updated
- Nov 13, 2024
- Reserved
- Oct 27, 2022
Description
An attacker with specialized hardware and physical access to an impacted device may be able to perform a voltage fault injection attack resulting in compromise of the ASP secure boot potentially leading to arbitrary code execution.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
Ryzen™ 3000 Series Desktop ProcessorsAMD |
|
Ryzen™ PRO 3000 Series Desktop ProcessorsAMD |
|
Ryzen™ 3000 Series Desktop Processors with Radeon™ GraphicsAMD |
|
Ryzen™ PRO 3000 Series Processors with Radeon™ Vega GraphicsAMD |
|
Athlon™ 3000 Series Processors with Radeon™ GraphicsAMD |
|
Athlon™ PRO 3000 Series Processors with Radeon™ Vega GraphicsAMD |
|
Ryzen™ 4000 Series Desktop Processors with Radeon™ GraphicsAMD |
|
Ryzen™ PRO 4000 Series Desktop ProcessorsAMD |
|
Ryzen™ 5000 Series Desktop ProcessorsAMD |
|
Ryzen™ 5000 Series Desktop Processors with Radeon™ GraphicsAMD |
|
Ryzen™ PRO 5000 Series Desktop Processors |
|
Ryzen™ Threadripper™ 2000 Series ProcessorsAMD |
|
Ryzen™ Threadripper™ 5000 Series ProcessorsAMD |
|
Ryzen™ Threadripper™ 3000 Series ProcessorsAMD |
|
Athlon™ 3000 Series Mobile Processors with Radeon™ GraphicsAMD |
|
Ryzen™ 5000 Series Processors with Radeon™ GraphicsAMD |
|
Ryzen™ PRO 5000 Series ProcessorsAMD |
|
Ryzen™ 6000 Series Processors with Radeon™ GraphicsAMD |
|
Ryzen™ PRO 6000 Series ProcessorsAMD |
|
Ryzen™ 7020 Series Processors with Radeon™ GraphicsAMD |
|
Ryzen™ 7030 Series Processors with Radeon™ GraphicsAMD |
|
Ryzen™ PRO 7030 Series ProcessorsAMD |
|
Ryzen™ 7035 Series Processors with Radeon™ GraphicsAMD |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.