NetSight
medium6.8

CVE-2023-20589

An attacker with specialized hardware and physical access to an impacted device may be able to perform a voltage fault injection attack resulting in compromise…

Impact

An attacker with specialized hardware and physical access to an impacted device may be able to perform a voltage fault injection attack resulting in compromise of the ASP secure boot potentially leading to arbitrary code execution. 

Affected products

VendorProductAffected versions
AmdRyzen 5 Pro 3400g Firmware
All versions
AmdRyzen 5 3400g Firmware
All versions
AmdRyzen 5 Pro 3400ge Firmware
All versions
AmdRyzen 5 Pro 3350g Firmware
All versions
AmdRyzen 5 Pro 3350ge Firmware
All versions
AmdRyzen 3 Pro 3200g Firmware
All versions
AmdRyzen 3 3200g Firmware
All versions
AmdRyzen 3 3200ge Firmware
All versions
AmdRyzen 3 Pro 3200ge Firmware
All versions
AmdRyzen 9 3950x Firmware
All versions
AmdRyzen 9 3900xt Firmware
All versions
AmdRyzen 9 3900x Firmware
All versions

References