{"id":"CVE-2023-20598","state":"PUBLISHED","title":"CVE-2023-20598","description":"\n\n\nAn improper privilege management in the AMD Radeon™ Graphics driver may allow an authenticated attacker to craft an IOCTL request to gain I/O control over arbitrary hardware ports or physical addresses resulting in a potential arbitrary code execution.\n\n\n\n","publishedAt":"2023-10-17T13:26:21.731Z","updatedAt":"2024-08-02T09:05:36.253Z","severity":{"score":7.8,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","source":"CISA-ADP"},"assigner":"AMD","products":[" AMD Radeon™ RX 5000 Series Graphics Cards","AMD Radeon™ RX 6000 Series Graphics Cards","AMD Radeon™ RX 7000 Series Graphics Cards","AMD Radeon™ PRO W5000 Series Graphics Cards","AMD Radeon™ PRO W6000 Series Graphics Cards","AMD Radeon™ PRO W7000 Series Graphics Cards","AMD Ryzen™ 7045 Series Processors with Radeon™ Graphics","AMD  Ryzen™ 7020 Series Processors with Radeon™ Graphics","AMD Ryzen™ 7040 Series Processors with Radeon™ Graphics","AMD Ryzen™ 7000 Series Processors with Radeon™ Graphics","AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics","AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics"],"affected":[{"vendor":" AMD","product":"Radeon™ RX 5000 Series Graphics Cards","defaultStatus":"affected","versions":[{"version":"various","status":"affected"}],"platforms":["Windows","x86"]},{"vendor":"AMD","product":"Radeon™ RX 6000 Series Graphics Cards","defaultStatus":"affected","versions":[{"version":"various ","status":"affected"}],"platforms":["Windows","x86"]},{"vendor":"AMD","product":"Radeon™ RX 7000 Series Graphics Cards","defaultStatus":"affected","versions":[{"version":"various ","status":"affected"}],"platforms":["Windows","x86"]},{"vendor":"AMD","product":"Radeon™ PRO W5000 Series Graphics Cards","defaultStatus":"affected","versions":[{"version":"Various ","status":"affected"}],"platforms":["Windows","x86"]},{"vendor":"AMD","product":"Radeon™ PRO W6000 Series Graphics Cards","defaultStatus":"affected","versions":[{"version":"various ","status":"affected"}],"platforms":["Windows","x86"]},{"vendor":"AMD","product":"Radeon™ PRO W7000 Series Graphics Cards","defaultStatus":"affected","versions":[{"version":"various","status":"affected"}],"platforms":["Windows","x86"]},{"vendor":"AMD","product":"Ryzen™ 7045 Series Processors with Radeon™ Graphics","defaultStatus":"affected","versions":[{"version":"various ","status":"affected"}],"platforms":["Windows","x86"]},{"vendor":"AMD","product":" Ryzen™ 7020 Series Processors with Radeon™ Graphics","defaultStatus":"affected","versions":[{"version":"various ","status":"affected"}],"platforms":["Windows","x86"]},{"vendor":"AMD","product":"Ryzen™ 7040 Series Processors with Radeon™ Graphics","defaultStatus":"affected","versions":[{"version":"various ","status":"affected"}],"platforms":["Windows","x86"]},{"vendor":"AMD","product":"Ryzen™ 7000 Series Processors with Radeon™ Graphics","defaultStatus":"affected","versions":[{"version":"various ","status":"affected"}],"platforms":["Windows","x86"]},{"vendor":"AMD","product":"Ryzen™ 6000 Series Processors with Radeon™ Graphics","defaultStatus":"affected","versions":[{"version":"various ","status":"affected"}],"platforms":["Windows","x86"]},{"vendor":"AMD","product":"Ryzen™ 7035 Series Processors with Radeon™ Graphics","defaultStatus":"affected","versions":[{"version":"various ","status":"affected"}],"platforms":["Windows","x86"]}],"references":["https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-6009"],"weaknesses":["CWE-269"],"ingestedAt":"2026-10-29T20:05:36.141Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2023/20xxx/CVE-2023-20598.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2023-20598","state":"PUBLISHED","datePublished":"2023-10-17T13:26:21.731Z","dateUpdated":"2024-08-02T09:05:36.253Z","assignerShortName":"AMD","assignerOrgId":"b58fc414-a1e4-4f92-9d70-1add41838648","dateReserved":"2022-10-27T18:53:39.763Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"\n\n\nAn improper privilege management in the AMD Radeon™ Graphics driver may allow an authenticated attacker to craft an IOCTL request to gain I/O control over arbitrary hardware ports or physical addresses resulting in a potential arbitrary code execution.\n\n\n\n"}],"affected":[{"vendor":" AMD","product":"Radeon™ RX 5000 Series Graphics Cards","defaultStatus":"affected","versions":[{"version":"various","status":"affected"}],"platforms":["Windows","x86"]},{"vendor":"AMD","product":"Radeon™ RX 6000 Series Graphics Cards","defaultStatus":"affected","versions":[{"version":"various ","status":"affected"}],"platforms":["Windows","x86"]},{"vendor":"AMD","product":"Radeon™ RX 7000 Series Graphics Cards","defaultStatus":"affected","versions":[{"version":"various ","status":"affected"}],"platforms":["Windows","x86"]},{"vendor":"AMD","product":"Radeon™ PRO W5000 Series Graphics Cards","defaultStatus":"affected","versions":[{"version":"Various ","status":"affected"}],"platforms":["Windows","x86"]},{"vendor":"AMD","product":"Radeon™ PRO W6000 Series Graphics Cards","defaultStatus":"affected","versions":[{"version":"various ","status":"affected"}],"platforms":["Windows","x86"]},{"vendor":"AMD","product":"Radeon™ PRO W7000 Series Graphics Cards","defaultStatus":"affected","versions":[{"version":"various","status":"affected"}],"platforms":["Windows","x86"]},{"vendor":"AMD","product":"Ryzen™ 7045 Series Processors with Radeon™ Graphics","defaultStatus":"affected","versions":[{"version":"various ","status":"affected"}],"platforms":["Windows","x86"]},{"vendor":"AMD","product":" Ryzen™ 7020 Series Processors with Radeon™ Graphics","defaultStatus":"affected","versions":[{"version":"various ","status":"affected"}],"platforms":["Windows","x86"]},{"vendor":"AMD","product":"Ryzen™ 7040 Series Processors with Radeon™ Graphics","defaultStatus":"affected","versions":[{"version":"various ","status":"affected"}],"platforms":["Windows","x86"]},{"vendor":"AMD","product":"Ryzen™ 7000 Series Processors with Radeon™ Graphics","defaultStatus":"affected","versions":[{"version":"various ","status":"affected"}],"platforms":["Windows","x86"]},{"vendor":"AMD","product":"Ryzen™ 6000 Series Processors with Radeon™ Graphics","defaultStatus":"affected","versions":[{"version":"various ","status":"affected"}],"platforms":["Windows","x86"]},{"vendor":"AMD","product":"Ryzen™ 7035 Series Processors with Radeon™ Graphics","defaultStatus":"affected","versions":[{"version":"various ","status":"affected"}],"platforms":["Windows","x86"]}],"references":[{"url":"https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-6009","tags":["vendor-advisory"]}],"providerMetadata":{"shortName":"AMD","orgId":"b58fc414-a1e4-4f92-9d70-1add41838648","dateUpdated":"2023-10-17T13:26:21.731Z"},"datePublic":"2023-10-16T17:00:00.000Z","source":{"advisory":"  AMD-SB-6009","discovery":"EXTERNAL"},"x_generator":{"engine":"Vulnogram 0.1.0-dev"}},"adp":[{"title":"CISA ADP Vulnrichment","affected":[{"vendor":"amd","product":"radeon_rx_5300_xt","defaultStatus":"unknown","versions":[{"version":"0","status":"affected","lessThanOrEqual":"*","versionType":"custom"}],"cpes":["cpe:2.3:h:amd:radeon_pro_w5500:-:*:*:*:*:*:*:*","cpe:2.3:h:amd:radeon_pro_w5500x:-:*:*:*:*:*:*:*","cpe:2.3:h:amd:radeon_pro_w5700:-:*:*:*:*:*:*:*","cpe:2.3:h:amd:radeon_pro_w5700x:-:*:*:*:*:*:*:*","cpe:2.3:h:amd:radeon_pro_w6300:-:*:*:*:*:*:*:*","cpe:2.3:h:amd:radeon_pro_w6300m:-:*:*:*:*:*:*:*","cpe:2.3:h:amd:radeon_pro_w6400:-:*:*:*:*:*:*:*","cpe:2.3:h:amd:radeon_pro_w6500m:-:*:*:*:*:*:*:*","cpe:2.3:h:amd:radeon_pro_w6600:-:*:*:*:*:*:*:*","cpe:2.3:h:amd:radeon_pro_w6600m:-:*:*:*:*:*:*:*","cpe:2.3:h:amd:radeon_pro_w6600x:-:*:*:*:*:*:*:*","cpe:2.3:h:amd:radeon_pro_w6800:-:*:*:*:*:*:*:*","cpe:2.3:h:amd:radeon_pro_w6800x:-:*:*:*:*:*:*:*","cpe:2.3:h:amd:radeon_pro_w6800x_duo:-:*:*:*:*:*:*:*","cpe:2.3:h:amd:radeon_pro_w6900x:-:*:*:*:*:*:*:*","cpe:2.3:h:amd:radeon_pro_w7500:-:*:*:*:*:*:*:*","cpe:2.3:h:amd:radeon_pro_w7600:-:*:*:*:*:*:*:*","cpe:2.3:h:amd:radeon_pro_w7800:-:*:*:*:*:*:*:*","cpe:2.3:h:amd:radeon_pro_w7900:-:*:*:*:*:*:*:*","cpe:2.3:h:amd:radeon_rx_7600:-:*:*:*:*:*:*:*","cpe:2.3:h:amd:radeon_rx_7600m:-:*:*:*:*:*:*:*","cpe:2.3:h:amd:radeon_rx_7600m_xt:-:*:*:*:*:*:*:*","cpe:2.3:h:amd:radeon_rx_7600s:-:*:*:*:*:*:*:*","cpe:2.3:h:amd:radeon_rx_7600xt:-:*:*:*:*:*:*:*","cpe:2.3:h:amd:radeon_rx_7700s:-:*:*:*:*:*:*:*","cpe:2.3:h:amd:radeon_rx_7700xt:-:*:*:*:*:*:*:*","cpe:2.3:h:amd:radeon_rx_7700_xt:-:*:*:*:*:*:*:*","cpe:2.3:h:amd:radeon_rx_7800xt:-:*:*:*:*:*:*:*","cpe:2.3:h:amd:radeon_rx_7800_xt:-:*:*:*:*:*:*:*","cpe:2.3:h:amd:radeon_rx_7900_gre:-:*:*:*:*:*:*:*","cpe:2.3:h:amd:radeon_rx_7900m:-:*:*:*:*:*:*:*","cpe:2.3:h:amd:radeon_rx_7900xt:-:*:*:*:*:*:*:*","cpe:2.3:h:amd:radeon_rx_7900_xt:-:*:*:*:*:*:*:*","cpe:2.3:h:amd:radeon_rx_7900xtx:-:*:*:*:*:*:*:*","cpe:2.3:h:amd:radeon_rx_7900_xtx:-:*:*:*:*:*:*:*","cpe:2.3:o:amd:radeon_rx_7900xtx_firmware:-:*:*:*:*:*:*:*","cpe:2.3:h:amd:radeon_rx_6900_xt:-:*:*:*:*:*:*:*","cpe:2.3:h:amd:radeon_rx_6300m:-:*:*:*:*:*:*:*","cpe:2.3:h:amd:radeon_rx_6400:-:*:*:*:*:*:*:*","cpe:2.3:h:amd:radeon_rx_6450m:-:*:*:*:*:*:*:*","cpe:2.3:h:amd:radeon_rx_6500m:-:*:*:*:*:*:*:*","cpe:2.3:h:amd:radeon_rx_6500_xt:-:*:*:*:*:*:*:*","cpe:2.3:h:amd:radeon_rx_6550m:-:*:*:*:*:*:*:*","cpe:2.3:h:amd:radeon_rx_6550s:-:*:*:*:*:*:*:*","cpe:2.3:h:amd:radeon_rx_6600:-:*:*:*:*:*:*:*","cpe:2.3:h:amd:radeon_rx_6600m:-:*:*:*:*:*:*:*","cpe:2.3:h:amd:radeon_rx_6600s:-:*:*:*:*:*:*:*","cpe:2.3:h:amd:radeon_rx_6600_xt:-:*:*:*:*:*:*:*","cpe:2.3:h:amd:radeon_rx_6650m:-:*:*:*:*:*:*:*","cpe:2.3:h:amd:radeon_rx_6650m_xt:-:*:*:*:*:*:*:*","cpe:2.3:h:amd:radeon_rx_6650_xt:-:*:*:*:*:*:*:*","cpe:2.3:h:amd:radeon_rx_6700:-:*:*:*:*:*:*:*","cpe:2.3:h:amd:radeon_rx_6700m:-:*:*:*:*:*:*:*","cpe:2.3:h:amd:radeon_rx_6700s:-:*:*:*:*:*:*:*","cpe:2.3:h:amd:radeon_rx_6700_xt:-:*:*:*:*:*:*:*","cpe:2.3:h:amd:radeon_rx_6750_gre_10gb:-:*:*:*:*:*:*:*","cpe:2.3:h:amd:radeon_rx_6750_gre_12gb:-:*:*:*:*:*:*:*","cpe:2.3:h:amd:radeon_rx_6750_xt:-:*:*:*:*:*:*:*","cpe:2.3:h:amd:radeon_rx_6800:-:*:*:*:*:*:*:*","cpe:2.3:h:amd:radeon_rx_6800m:-:*:*:*:*:*:*:*","cpe:2.3:h:amd:radeon_rx_6800s:-:*:*:*:*:*:*:*","cpe:2.3:h:amd:radeon_rx_5700:-:*:*:*:*:*:*:*","cpe:2.3:h:amd:radeon_rx_5700_xt:-:*:*:*:*:*:*:*","cpe:2.3:h:amd:radeon_rx_5600:-:*:*:*:*:*:*:*","cpe:2.3:h:amd:radeon_rx_5600_xt:-:*:*:*:*:*:*:*","cpe:2.3:h:amd:radeon_rx_5500:-:*:*:*:*:*:*:*","cpe:2.3:h:amd:radeon_rx_5500_xt:-:*:*:*:*:*:*:*","cpe:2.3:h:amd:radeon_rx_5300:-:*:*:*:*:*:*:*","cpe:2.3:h:amd:radeon_rx_5300_xt:-:*:*:*:*:*:*:*"]},{"vendor":"amd","product":"ryzen_5_7645hx","defaultStatus":"unknown","versions":[{"version":"0","status":"affected","lessThan":"*","versionType":"custom"}],"cpes":["cpe:2.3:h:amd:ryzen_7_7700:-:*:*:*:*:*:*:*","cpe:2.3:h:amd:ryzen_7_7700x:-:*:*:*:*:*:*:*","cpe:2.3:h:amd:ryzen_7_7735hs:-:*:*:*:*:*:*:*","cpe:2.3:h:amd:ryzen_7_7735u:-:*:*:*:*:*:*:*","cpe:2.3:h:amd:ryzen_7_7736u:-:*:*:*:*:*:*:*","cpe:2.3:h:amd:ryzen_7_7745hx:-:*:*:*:*:*:*:*","cpe:2.3:h:amd:ryzen_7_7800x3d:-:*:*:*:*:*:*:*","cpe:2.3:h:amd:ryzen_7_7840h:-:*:*:*:*:*:*:*","cpe:2.3:h:amd:ryzen_7_7840u:-:*:*:*:*:*:*:*","cpe:2.3:h:amd:ryzen_7_pro_7745:-:*:*:*:*:*:*:*","cpe:2.3:h:amd:ryzen_7_pro_7840h:-:*:*:*:*:*:*:*","cpe:2.3:h:amd:ryzen_7_pro_7840hs:-:*:*:*:*:*:*:*","cpe:2.3:h:amd:ryzen_7_6800hs:-:*:*:*:*:*:*:*","cpe:2.3:h:amd:ryzen_7_6800h:-:*:*:*:*:*:*:*","cpe:2.3:h:amd:ryzen_3_7320u:-:*:*:*:*:*:*:*","cpe:2.3:h:amd:ryzen_3_7335u:-:*:*:*:*:*:*:*","cpe:2.3:h:amd:ryzen_3_7440u:-:*:*:*:*:*:*:*","cpe:2.3:h:amd:ryzen_5_6600h:-:*:*:*:*:*:*:*","cpe:2.3:h:amd:ryzen_5_6600hs:-:*:*:*:*:*:*:*","cpe:2.3:h:amd:ryzen_5_6600u:-:*:*:*:*:*:*:*","cpe:2.3:h:amd:ryzen_5_7500f:-:*:*:*:*:*:*:*","cpe:2.3:h:amd:ryzen_5_7520u:-:*:*:*:*:*:*:*","cpe:2.3:h:amd:ryzen_5_7535hs:-:*:*:*:*:*:*:*","cpe:2.3:h:amd:ryzen_5_7535u:-:*:*:*:*:*:*:*","cpe:2.3:h:amd:ryzen_5_7545u:-:*:*:*:*:*:*:*","cpe:2.3:h:amd:ryzen_5_7600:-:*:*:*:*:*:*:*","cpe:2.3:h:amd:ryzen_5_7600x:-:*:*:*:*:*:*:*","cpe:2.3:h:amd:ryzen_5_7640h:-:*:*:*:*:*:*:*","cpe:2.3:h:amd:ryzen_5_7640u:-:*:*:*:*:*:*:*","cpe:2.3:h:amd:ryzen_5_7645hx:-:*:*:*:*:*:*:*"]},{"vendor":"amd","product":"ryzen_9_pro_7945","defaultStatus":"unknown","versions":[{"version":"0","status":"affected","lessThan":"*","versionType":"custom"}],"cpes":["cpe:2.3:h:amd:ryzen_9_6980hs:-:*:*:*:*:*:*:*","cpe:2.3:h:amd:ryzen_9_6980hx:-:*:*:*:*:*:*:*","cpe:2.3:h:amd:ryzen_9_7845hx:-:*:*:*:*:*:*:*","cpe:2.3:h:amd:ryzen_9_7900:-:*:*:*:*:*:*:*","cpe:2.3:h:amd:ryzen_9_7900x:-:*:*:*:*:*:*:*","cpe:2.3:h:amd:ryzen_9_7900x3d:-:*:*:*:*:*:*:*","cpe:2.3:h:amd:ryzen_9_7945hx:-:*:*:*:*:*:*:*","cpe:2.3:h:amd:ryzen_9_7945hx3d:-:*:*:*:*:*:*:*","cpe:2.3:h:amd:ryzen_9_7950x:-:*:*:*:*:*:*:*","cpe:2.3:h:amd:ryzen_9_7950x3d:-:*:*:*:*:*:*:*","cpe:2.3:h:amd:ryzen_9_pro_7940h:-:*:*:*:*:*:*:*","cpe:2.3:h:amd:ryzen_9_pro_7940hs:-:*:*:*:*:*:*:*","cpe:2.3:h:amd:ryzen_9_pro_7945:-:*:*:*:*:*:*:*"]}],"metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.8,"attackVector":"LOCAL","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"timestamp":"2024-06-27T17:12:05.139002Z","id":"CVE-2023-20598","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-269","type":"CWE","lang":"en","description":"CWE-269 Improper Privilege Management"}]}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-06-27T17:12:23.788Z"}},{"title":"CVE Program Container","references":[{"url":"https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-6009","tags":["vendor-advisory","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-02T09:05:36.253Z"}}]}}}