← CVE Intelligence

CVE-2023-20599

AMD / AMD EPYC™ 7002 Series Processors PUBLISHED

Description (CNA)

Improper register access control in ASP may allow a privileged attacker to perform unauthorized access to ASP’s Crypto Co-Processor (CCP) registers from x86 resulting in potential loss of control of cryptographic key pointer/index leading to loss of integrity or confidentiality.

Affected (CNA)

Vendor / productVersions
AMD / AMD EPYC™ 7002 Series Processorsunaffected RomePI 100H SEV 0.24.19 [hex 00.18.13]
AMD / AMD Ryzen™ Threadripper™ 3000 Processorsunaffected CastlePeakPI-SP3r3_1.0.0.F
AMD / AMD Ryzen™ Threadripper™ PRO 3000 WX Processorsunaffected ChagallWSPI-sWRX8 1.0.0.C; unaffected CastlePeakWSPI-sWRX8 1.0.0.H
AMD / AMD Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphicsunaffected PicassoPI-FP5_1.0.1.2c
AMD / AMD EPYC™ Embedded 7002 Series Processorsunaffected EmbRomePI-SP3 1.0.0.B
AMD / AMD EPYC™ Embedded 7003 Series Processorsunaffected EmbMilanPI-SP3 1.0.0.8
AMD / AMD Ryzen™ Embedded R1000 Series Processorsunaffected EmbeddedPI-FP5 1211
AMD / AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphicsunaffected EmbeddedPI-FP5 1211
AMD / AMD Ryzen™ Embedded R2000 Series Processorsunaffected EmbeddedR2KPI-FP5 1006
AMD / AMD Ryzen™ Embedded V1000 Series Processorsunaffected EmbeddedPI-FP5 1211 RC1

CWE

CWE-1262

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.