AMD AMD Radeon RX 6000 Series & PRO W6000 Series
At a glance
- Source
- NVD
- EPSS
- EPSS 0.22 % · percentile 13 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- AMD
- NVD status
- Modified
Description
An attacker with local access to the system can make unauthorized modifications of the security configuration of the SOC registers. This could allow potential corruption of AMD secure processor’s encrypted memory contents which may lead to arbitrary code execution in ASP.
Weaknesses (CWE)
- CWE-284 — Improper Access Control
References
Scores
| Version | Score | Vector | Scored by |
|---|---|---|---|
| CVSS 3.1 | HIGH 7.8 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H | CISA-ADP |
| CVSS 3.1 | HIGH 7.8 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H | NVD · nvd@nist.gov (Primary) |
| CVSS 3.1 | HIGH 7.8 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H | NVD · 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary) |
European references
- ENISA EUVD · EUVD-2021-13166
- GCVE · GCVE-0-2021-26360
Affected configurations (NVD CPE)
cpe:2.3:a:amd:enterprise_driver:*:*:*:*:*:*:*:*< 22.10.20cpe:2.3:a:amd:radeon_pro_software:*:*:*:*:enterprise:*:*:*< 22.q2cpe:2.3:a:amd:radeon_software:*:*:*:*:*:*:*:*< 22.5.2
Affected products
| Product | Versions |
|---|---|
| AMD · AMD Radeon RX 6000 Series & PRO W6000 Series | affected AMD Radeon Software < 22.5.2 ; affected AMD Radeon Pro Software Enterprise < 22.Q2 ; affected Enterprise Driver < 22.10.20 |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |