CVE-2023-20599

State: Published
Severity: 7.9 High
Published: Jun 10, 2025
Updated: Feb 26, 2026
Reserved: Oct 27, 2022

Description

Improper register access control in ASP may allow a privileged attacker to perform unauthorized access to ASP’s Crypto Co-Processor (CCP) registers from x86 resulting in potential loss of control of cryptographic key pointer/index leading to loss of integrity or confidentiality.

Scores

CVSS	Score	Vector	Source
3.1	7.9 High	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N	AMD

Weaknesses

CWE-1262 Register Interface Allows Software Access to Sensitive Data or Security Settings

Affected Products

Product	Versions
AMD EPYC™ 7002 Series ProcessorsAMD	RomePI 100H SEV 0.24.19 [hex 00.18.13]Not affected
AMD Ryzen™ Threadripper™ 3000 ProcessorsAMD	CastlePeakPI-SP3r3_1.0.0.FNot affected
AMD Ryzen™ Threadripper™ PRO 3000 WX ProcessorsAMD	ChagallWSPI-sWRX8 1.0.0.CNot affected CastlePeakWSPI-sWRX8 1.0.0.HNot affected
AMD Ryzen™ 3000 Series Mobile Processors with Radeon™ GraphicsAMD	PicassoPI-FP5_1.0.1.2cNot affected
AMD EPYC™ Embedded 7002 Series ProcessorsAMD	EmbRomePI-SP3 1.0.0.BNot affected
AMD EPYC™ Embedded 7003 Series ProcessorsAMD	EmbMilanPI-SP3 1.0.0.8Not affected
AMD Ryzen™ Embedded R1000 Series ProcessorsAMD	EmbeddedPI-FP5 1211Not affected
AMD Athlon™ 3000 Series Mobile Processors with Radeon™ GraphicsAMD	EmbeddedPI-FP5 1211Not affected
AMD Ryzen™ Embedded R2000 Series ProcessorsAMD	EmbeddedR2KPI-FP5 1006Not affected
AMD Ryzen™ Embedded V1000 Series ProcessorsAMD	EmbeddedPI-FP5 1211 RC1Not affected

References

https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-7039.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.