AMD AMD Radeon RX 6000 Series & PRO W6000 Series
En bref
- Source
- NVD
- EPSS
- EPSS 0.22 % · centile 13 ()
- État
- PUBLISHED
- Publiée
- Mise à jour
- Attribuée par
- AMD
- Statut NVD
- Modified
Rechercher sur…
Description
An attacker with local access to the system can make unauthorized modifications of the security configuration of the SOC registers. This could allow potential corruption of AMD secure processor’s encrypted memory contents which may lead to arbitrary code execution in ASP.
Faiblesses (CWE)
- CWE-284 — Contrôle d'accès incorrect
Références
Scores
| Version | Score | Vecteur | Évalué par |
|---|---|---|---|
| CVSS 3.1 | HIGH 7.8 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H | CISA-ADP |
| CVSS 3.1 | HIGH 7.8 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H | NVD · nvd@nist.gov (Primary) |
| CVSS 3.1 | HIGH 7.8 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H | NVD · 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary) |
Références européennes
- ENISA EUVD · EUVD-2021-13166
- GCVE · GCVE-0-2021-26360
Configurations affectées (CPE NVD)
cpe:2.3:a:amd:enterprise_driver:*:*:*:*:*:*:*:*< 22.10.20cpe:2.3:a:amd:radeon_pro_software:*:*:*:*:enterprise:*:*:*< 22.q2cpe:2.3:a:amd:radeon_software:*:*:*:*:*:*:*:*< 22.5.2
Produits affectés
| Produit | Versions |
|---|---|
| AMD · AMD Radeon RX 6000 Series & PRO W6000 Series | affected AMD Radeon Software < 22.5.2 ; affected AMD Radeon Pro Software Enterprise < 22.Q2 ; affected Enterprise Driver < 22.10.20 |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |