Improper Access Control in fTPM Driver Affects AMD Products
CVE-2023-20515
5.7MEDIUM
Key Information:
What is CVE-2023-20515?
The fTPM driver in trusted operating systems by AMD is susceptible to improper access control. This flaw enables a privileged attacker to manipulate system memory, which could compromise the integrity, confidentiality, and availability of system resources, leading to significant security implications for affected AMD products.
Affected Version(s)
AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics ComboAM4v2PI 1.2.0.CA
AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics Pollock-FT5 1.0.0.7
AMD Ryzen™ 3000 Series Desktop Processors ComboAM4v2PI 1.2.0.CA