Skip to content
CVE PROGRAM SOURCE RECORD1.8 Low

CVE-2023-20540

An observable timing discrepancy in the ASP could allow a privileged attacker to perform a brute-force attack against the hash message authentication code, allowing arbitrary messa

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
AMD

Description

An observable timing discrepancy in the ASP could allow a privileged attacker to perform a brute-force attack against the hash message authentication code, allowing arbitrary message input, potentially leading to a loss of data integrity.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

AMD AMD Ryzen™ 3000 Series Desktop Processors

Default version status: affected

  • ComboAM4 1.0.0.Eunaffected
  • ComboAM4v2PI 1.2.0.CAunaffected

AMD AMD Ryzen™ 5000 Series Desktop Processors

Default version status: affected

  • ComboAM4v2PI 1.2.0.CAunaffected

AMD AMD Ryzen™ Threadripper™ 3000 Series Processors

Default version status: affected

  • CastlePeakPI-SP3r3 1.0.0.Cunaffected

AMD AMD Ryzen™ Threadripper™ PRO 3000WX Series Processors

Default version status: affected

  • CastlePeakWSPI-sWRX8 1.0.0.Eunaffected

AMD AMD Ryzen™ Threadripper™ PRO 5000 WX-Series Processors

Default version status: affected

  • ChagallWSPI-sWRX8 1.0.0.9unaffected

References