Skip to content
CVE PROGRAM SOURCE RECORD7.9 High

CVE-2023-20599

Improper register access control in ASP may allow a privileged attacker to perform unauthorized access to ASP’s Crypto Co-Processor (CCP) registers from x86 resulting in potential

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
AMD

Description

Improper register access control in ASP may allow a privileged attacker to perform unauthorized access to ASP’s Crypto Co-Processor (CCP) registers from x86 resulting in potential loss of control of cryptographic key pointer/index leading to loss of integrity or confidentiality.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

AMD AMD EPYC™ 7002 Series Processors

Default version status: affected

  • RomePI 100H SEV 0.24.19 [hex 00.18.13]unaffected

AMD AMD Ryzen™ Threadripper™ 3000 Processors

Default version status: affected

  • CastlePeakPI-SP3r3_1.0.0.Funaffected

AMD AMD Ryzen™ Threadripper™ PRO 3000 WX Processors

Default version status: affected

  • ChagallWSPI-sWRX8 1.0.0.Cunaffected
  • CastlePeakWSPI-sWRX8 1.0.0.Hunaffected

AMD AMD Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics

Default version status: affected

  • PicassoPI-FP5_1.0.1.2cunaffected

AMD AMD EPYC™ Embedded 7002 Series Processors

Default version status: affected

  • EmbRomePI-SP3 1.0.0.Bunaffected

AMD AMD EPYC™ Embedded 7003 Series Processors

Default version status: affected

  • EmbMilanPI-SP3 1.0.0.8unaffected

AMD AMD Ryzen™ Embedded R1000 Series Processors

Default version status: affected

  • EmbeddedPI-FP5 1211unaffected

AMD AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics

Default version status: affected

  • EmbeddedPI-FP5 1211unaffected

AMD AMD Ryzen™ Embedded R2000 Series Processors

Default version status: affected

  • EmbeddedR2KPI-FP5 1006unaffected

AMD AMD Ryzen™ Embedded V1000 Series Processors

Default version status: affected

  • EmbeddedPI-FP5 1211 RC1unaffected

References