CyberSecBulletin
CVE-2023-20599NVD status: Deferred

AMD EPYC™ 7002 Series Processors: Improper Access Control for Register Interface

Published Updated By the CyberSecBulletin desk

CVE-2023-20599 is a high-severity improper access control for register interface vulnerability in AMD EPYC™ 7002 Series Processors from AMD, with a CVSS 3.1 base score of 7.9 out of 10. It can be exploited with local access to the system by an attacker with administrator privileges, without any action from a user. There is no confirmed exploitation so far. EPSS estimates a 0.19% chance of exploitation within 30 days, which is low compared with other CVEs.

Next patch cycle

High severity with no evidence of exploitation so far.

What to do

  1. Check which version of AMD EPYC™ 7002 Series Processors you run against the affected versions below, and install the vendor's latest release.

Affected products and versions

VendorProductAffected versionsFixed in
AMDAMD EPYC™ 7002 Series ProcessorsNot specified in the recordNot stated
AMDAMD Ryzen™ Threadripper™ 3000 ProcessorsNot specified in the recordNot stated
AMDAMD Ryzen™ Threadripper™ PRO 3000 WX ProcessorsNot specified in the recordNot stated
AMDAMD Ryzen™ 3000 Series Mobile Processors with Radeon™ GraphicsNot specified in the recordNot stated
AMDAMD EPYC™ Embedded 7002 Series ProcessorsNot specified in the recordNot stated
AMDAMD EPYC™ Embedded 7003 Series ProcessorsNot specified in the recordNot stated
AMDAMD Ryzen™ Embedded R1000 Series ProcessorsNot specified in the recordNot stated
AMDAMD Athlon™ 3000 Series Mobile Processors with Radeon™ GraphicsNot specified in the recordNot stated
AMDAMD Ryzen™ Embedded R2000 Series ProcessorsNot specified in the recordNot stated
AMDAMD Ryzen™ Embedded V1000 Series ProcessorsNot specified in the recordNot stated

Version data comes from the organisation that assigned the CVE. Confirm against the vendor advisory before deciding you are unaffected.

How the severity score breaks down

Attack vector
LocalThe attacker needs local access or must trick a user into running something.
Attack complexity
LowNo special conditions are needed; the attack works reliably.
Privileges required
HighAdministrator-level access is required first.
User interaction
NoneNo action by a victim is required.
Scope
ChangedThe attack can reach beyond the vulnerable component into other systems.
Confidentiality
HighAll data handled by the component can be read.
Integrity
HighData or code can be modified at will.
Availability
NoneAvailability is not affected.

Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N. Scored by CNA (amd.com).

Official description

Improper register access control in ASP may allow a privileged attacker to perform unauthorized access to ASP’s Crypto Co-Processor (CCP) registers from x86 resulting in potential loss of control of cryptographic key pointer/index leading to loss of integrity or confidentiality.

Source: the CVE record as published by its numbering authority, via NVD and CVE.org.

The underlying weakness: Improper Access Control for Register Interface

The product uses memory-mapped I/O registers that act as an interface to hardware functionality from software, but there is improper access control to those registers.

How developers prevent this class of flaw

  • Design proper policies for hardware register access from software.
  • Ensure that access control policies for register access are implemented in accordance with the specified design.

More Improper Access Control for Register Interface vulnerabilities (CWE-1262)

Timeline

  1. CVE record published.
  2. CISA published its SSVC assessment (exploitation: none, automatable: no, technical impact: total).
  3. Record last changed materially (score, affected products, status or references).

References

Other vulnerabilities in AMD EPYC™ 7002 Series Processors

All AMD EPYC™ 7002 Series Processors vulnerabilities

Recent Improper Access Control for Register Interface vulnerabilities

Spotted an error? Tell us.