CVE-2023-20567

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-20567
Improper signature verification of RadeonTM RX Vega M Graphics driver for Windows may allow an attacker with admin privileges to launch AMDSoftwareInstaller.exe without validating the file signature potentially leading to arbitrary code execution.

6.7 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 0.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-6003 Vendor Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00971.html Vendor Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:intel:radeon_rx_vega_m_firmware:*:*:*:*:*:*:*:*
OR cpe:2.3:h:intel:core_i5-8305g:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i7-8705g:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i7-8706g:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:core_i7-8709g:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:nuc_8_enthusiast_nuc8i7hnkqc:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:nuc_8_enthusiast_nuc8i7hvkva:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:nuc_8_enthusiast_nuc8i7hvkvaw:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:nuc_kit_nuc8i7hnk:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:nuc_kit_nuc8i7hvk:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:a:amd:radeon_software:*:*:*:*:adrenalin:*:*:*
OR cpe:2.3:h:amd:radeon_rx_5300:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_rx_5300_xt:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_rx_5300m:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_rx_5500:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_rx_5500_xt:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_rx_5500m:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_rx_5600:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_rx_5600_xt:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_rx_5600m:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_rx_5700:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_rx_5700_xt:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_rx_5700m:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_rx_6300m:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_rx_6400:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_rx_6450m:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_rx_6500_xt:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_rx_6500m:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_rx_6550m:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_rx_6550s:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_rx_6600:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_rx_6600_xt:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_rx_6600m:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_rx_6600s:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_rx_6650_xt:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_rx_6650m:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_rx_6650m_xt:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_rx_6700:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_rx_6700_xt:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_rx_6700m:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_rx_6700s:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_rx_6800:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_rx_6800_xt:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_rx_6800m:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_rx_6800s:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_rx_6850m_xt:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_rx_6900_xt:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_rx_6950_xt:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_rx_7600:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_rx_7600m:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_rx_7600m_xt:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_rx_7600s:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_rx_7700_xt:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_rx_7700s:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_rx_7800_xt:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_rx_7900_gre:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_rx_7900_xt:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_rx_7900_xtx:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_rx_7900m:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:a:amd:radeon_software:*:*:*:*:pro:*:*:*
OR cpe:2.3:h:amd:radeon_pro_w5500:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_pro_w5500x:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_pro_w5700:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_pro_w5700x:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_pro_w6300:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_pro_w6300m:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_pro_w6400:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_pro_w6500m:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_pro_w6600:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_pro_w6600m:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_pro_w6600x:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_pro_w6800:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_pro_w6800x:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_pro_w6800x_duo:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_pro_w6900x:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_pro_w7500:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_pro_w7600:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_pro_w7800:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:amd:radeon_rx_vega_56_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_rx_vega_56:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:o:amd:radeon_rx_vega_64_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_rx_vega_64:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
cpe:2.3:o:amd:radeon_pro_vega_56_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_pro_vega_56:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND
cpe:2.3:o:amd:radeon_pro_vega_64_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_pro_vega_64:-:*:*:*:*:*:*:*

Configuration 8 (hide)

AND
OR cpe:2.3:a:amd:radeon_software:*:*:*:*:adrenalin:*:*:*
cpe:2.3:a:amd:radeon_software:*:*:*:*:pro:*:*:*
OR cpe:2.3:h:amd:ryzen_3_3015ce:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_3_3015e:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_3_4100:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_3_4300g:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_3_4300ge:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_3_4300u:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_3_5300g:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_3_5300ge:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_3_5300u:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_5_4500:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_5_4500u:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_5_4600g:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_5_4600ge:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_5_4600h:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_5_4600hs:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_5_4600u:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_5_4680u:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_5_5500h:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_5_5500u:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_5_5600g:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_5_5600ge:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_5_pro_3200g:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_5_pro_3200ge:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_5_pro_3350g:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_5_pro_3350ge:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_5_pro_3400g:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_5_pro_3400ge:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_7_4700g:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_7_4700ge:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_7_4700u:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_7_4800h:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_7_4800hs:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_7_4980u:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_7_5700g:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_7_5700ge:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_7_5700u:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_9_4900h:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_9_4900hs:-:*:*:*:*:*:*:*
History

27 Nov 2023, 18:53

Type Values Removed Values Added
New CVE
Information

Published : 2023-11-14 19:15

Updated : 2024-02-05 00:22

NVD link : CVE-2023-20567

Mitre link : CVE-2023-20567

CVE.ORG link : CVE-2023-20567

JSON object : View

Products Affected

amd

  • radeon_pro_w5500
  • radeon_rx_6450m
  • ryzen_5_pro_3350ge
  • radeon_rx_7900_xt
  • radeon_pro_vega_64_firmware
  • radeon_pro_w7500
  • radeon_rx_5300_xt
  • radeon_pro_vega_64
  • radeon_pro_w6400
  • radeon_pro_w6300m
  • radeon_rx_6550m
  • ryzen_9_4900hs
  • radeon_rx_5500_xt
  • radeon_pro_w6600
  • ryzen_5_5600g
  • radeon_rx_7800_xt
  • radeon_rx_6300m
  • radeon_rx_6500_xt
  • ryzen_7_5700u
  • radeon_rx_7900_gre
  • ryzen_9_4900h
  • radeon_pro_w6900x
  • radeon_rx_5700
  • ryzen_3_4300u
  • radeon_rx_6600m
  • radeon_rx_6650_xt
  • ryzen_5_4500
  • radeon_rx_7700_xt
  • ryzen_7_5700g
  • radeon_pro_w7800
  • radeon_rx_7900_xtx
  • radeon_rx_6600_xt
  • radeon_rx_6800
  • ryzen_5_4600ge
  • radeon_pro_w6500m
  • radeon_pro_w6600m
  • radeon_rx_6650m_xt
  • radeon_rx_7600
  • radeon_rx_5600_xt
  • radeon_rx_7600s
  • radeon_rx_5600m
  • ryzen_7_4700u
  • ryzen_5_4680u
  • radeon_rx_7900m
  • ryzen_3_3015e
  • ryzen_5_pro_3400g
  • ryzen_5_pro_3350g
  • radeon_rx_vega_64_firmware
  • ryzen_5_5500u
  • radeon_rx_6850m_xt
  • radeon_rx_vega_56_firmware
  • radeon_rx_6700m
  • radeon_rx_7600m
  • radeon_rx_5700m
  • radeon_pro_w5700
  • radeon_pro_w6600x
  • radeon_rx_5700_xt
  • ryzen_5_5600ge
  • ryzen_5_5500h
  • radeon_pro_vega_56_firmware
  • ryzen_3_4100
  • ryzen_5_4600hs
  • radeon_rx_6800_xt
  • radeon_rx_5500
  • radeon_rx_6550s
  • radeon_pro_w6300
  • radeon_rx_7600m_xt
  • radeon_pro_w6800
  • ryzen_5_4600h
  • radeon_rx_6900_xt
  • radeon_rx_6600s
  • radeon_pro_w5700x
  • ryzen_3_4300g
  • radeon_rx_5500m
  • ryzen_7_5700ge
  • radeon_rx_6700s
  • radeon_rx_6700
  • ryzen_7_4800hs
  • radeon_rx_vega_64
  • radeon_pro_w6800x_duo
  • ryzen_3_5300u
  • radeon_rx_vega_56
  • ryzen_5_4600g
  • ryzen_7_4700ge
  • ryzen_3_5300ge
  • radeon_software
  • radeon_rx_5300
  • ryzen_5_4500u
  • ryzen_7_4980u
  • ryzen_3_4300ge
  • radeon_pro_vega_56
  • ryzen_5_4600u
  • ryzen_5_pro_3400ge
  • radeon_rx_5600
  • ryzen_3_5300g
  • ryzen_5_pro_3200g
  • ryzen_7_4700g
  • ryzen_3_3015ce
  • radeon_pro_w6800x
  • radeon_rx_6650m
  • radeon_rx_6400
  • radeon_rx_6700_xt
  • radeon_rx_6800s
  • radeon_rx_6950_xt
  • radeon_pro_w7600
  • ryzen_7_4800h
  • radeon_pro_w5500x
  • radeon_rx_5300m
  • radeon_rx_6600
  • radeon_rx_6500m
  • ryzen_5_pro_3200ge
  • radeon_rx_6800m
  • radeon_rx_7700s

intel

  • nuc_kit_nuc8i7hvk
  • core_i5-8305g
  • nuc_8_enthusiast_nuc8i7hvkvaw
  • nuc_8_enthusiast_nuc8i7hvkva
  • core_i7-8706g
  • core_i7-8709g
  • nuc_kit_nuc8i7hnk
  • core_i7-8705g
  • nuc_8_enthusiast_nuc8i7hnkqc
  • radeon_rx_vega_m_firmware
CWE
CWE-347

Improper Verification of Cryptographic Signature