NetSight
medium5.5

CVE-2023-20597

Improper initialization of variables in the DXE driver may allow a privileged user to leak sensitive information via local access.

Impact

Improper initialization of variables in the DXE driver may allow a privileged user to leak sensitive information via local access.

Affected products

VendorProductAffected versions
AmdRyzen 3 3100 Firmware
Versions comboam4pi_1.0.0.9, comboam4v2pi_1.2.0.8
AmdRyzen 3 3200g Firmware
Versions comboam4pi_1.0.0.9, comboam4v2pi_1.2.0.8
AmdRyzen 3 3200ge Firmware
Versions comboam4pi_1.0.0.9, comboam4v2pi_1.2.0.8
AmdRyzen 3 3200u Firmware
Versions comboam4pi_1.0.0.9, comboam4v2pi_1.2.0.8
AmdRyzen 3 3250c Firmware
Versions comboam4pi_1.0.0.9, comboam4v2pi_1.2.0.8
AmdRyzen 3 3250u Firmware
Versions comboam4pi_1.0.0.9, comboam4v2pi_1.2.0.8
AmdRyzen 3 3300 Firmware
Versions comboam4pi_1.0.0.9, comboam4v2pi_1.2.0.8
AmdRyzen 3 3300g Firmware
Versions comboam4pi_1.0.0.9, comboam4v2pi_1.2.0.8
AmdRyzen 3 3300u Firmware
Versions comboam4pi_1.0.0.9, comboam4v2pi_1.2.0.8
AmdRyzen 3 3300x Firmware
Versions comboam4pi_1.0.0.9, comboam4v2pi_1.2.0.8
AmdRyzen 3 3350u Firmware
Versions comboam4pi_1.0.0.9, comboam4v2pi_1.2.0.8
AmdRyzen 3 3450u Firmware
Versions comboam4pi_1.0.0.9, comboam4v2pi_1.2.0.8

Weakness classification

References