Privilege Escalation Vulnerability in AMD Ryzen Master Software by AMD
CVE-2020-12928

7.8HIGH

Key Information:

Vendor
Amd
Status
Amd Ryzen Master
Vendor
CVE Published:
13 October 2020

Badges

👾 Exploit Exists🟡 Public PoC

Summary

A vulnerability exists in the dynamically loaded AMD driver within AMD Ryzen Master V15, which could allow an authenticated user to escalate their privileges to NT Authority System. This could potentially enable unauthorized actions, compromising system integrity and security. It is crucial for users and administrators to be aware of this vulnerability and to implement necessary updates or mitigations.

Affected Version(s)

AMD Ryzen Master Fixed in version Ryzen Master 2.2.0.1543 and later

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

AmdRyzenMasterCheat
Created by ekknod

References

https://www.amd.com/en/corporate/product-security
x_refsource_MISC

EPSS Score

9% chance of being exploited in the next 30 days.

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.