Improper Access Control in fTPM Driver Affects AMD Products
CVE-2023-20515

5.7MEDIUM

Key Information:

Vendor

Amd
Status
Amd Ryzen™ 3000 Series Desktop Processors
Amd Ryzen™ 5000 Series Desktop Processors
Amd Ryzen™ 5000 Series Desktop Processor With Radeon™ Graphics
Amd Ryzen™ 7000 Series Desktop Processors
Vendor
CVE Published:
11 February 2025

What is CVE-2023-20515?

The fTPM driver in trusted operating systems by AMD is susceptible to improper access control. This flaw enables a privileged attacker to manipulate system memory, which could compromise the integrity, confidentiality, and availability of system resources, leading to significant security implications for affected AMD products.

Affected Version(s)

AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics ComboAM4v2PI 1.2.0.CA

AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics Pollock-FT5 1.0.0.7

AMD Ryzen™ 3000 Series Desktop Processors ComboAM4v2PI 1.2.0.CA

References

https://www.amd.com/en/resources/product-security/bulleti...
https://www.amd.com/en/resources/product-security/bulleti...

CVSS V3.1

Score:
5.7
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.