CVE-2023-20579

MEDIUM
Published Feb 13, 2024 Modified Mar 14, 2025 CWE-284

Description

Improper Access Control in the AMD SPI protection feature may allow a user with Ring0 (kernel mode) privileged access to bypass protections potentially resulting in loss of integrity and availability.

Is your site exposed to CVE-2023-20579?

Run a free security scan — no signup, results in seconds.

CVSS v3.1 Score

6.0
MEDIUM
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H

Weakness Type (CWE)

CWE-284 CWE-284

Affected Products

Vendor Product
amd ryzen_7_5700g_firmware
amd ryzen_7_5700g
amd ryzen_7_5700ge_firmware
amd ryzen_7_5700ge
amd ryzen_5_5600g_firmware
amd ryzen_5_5600g
amd ryzen_5_5600gt_firmware
amd ryzen_5_5600gt
amd ryzen_5_5600ge_firmware
amd ryzen_5_5600ge
amd ryzen_5_5500gt_firmware
amd ryzen_5_5500gt
amd ryzen_3_5300g_firmware
amd ryzen_3_5300g
amd ryzen_3_5300ge_firmware
amd ryzen_3_5300ge
amd ryzen_5_7500f_firmware
amd ryzen_5_7500f
amd ryzen_5_pro_7645_firmware
amd ryzen_5_pro_7645
amd ryzen_5_7600x_firmware
amd ryzen_5_7600x
amd ryzen_5_7600_firmware
amd ryzen_5_7600
amd ryzen_5_7600x3d_firmware
amd ryzen_5_7600x3d
amd ryzen_7_pro_7745_firmware
amd ryzen_7_pro_7745
amd ryzen_7_7700_firmware
amd ryzen_7_7700
amd ryzen_7_7700x_firmware
amd ryzen_7_7700x
amd ryzen_7_7800x3d_firmware
amd ryzen_7_7800x3d
amd ryzen_9_pro_7945_firmware
amd ryzen_9_pro_7945
amd ryzen_9_7900_firmware
amd ryzen_9_7900
amd ryzen_9_7900x_firmware
amd ryzen_9_7900x
amd ryzen_9_7900x3d_firmware
amd ryzen_9_7900x3d
amd ryzen_9_7950x_firmware
amd ryzen_9_7950x
amd ryzen_9_7950x3d_firmware
amd ryzen_9_7950x3d
amd ryzen_threadripper_7960x_firmware
amd ryzen_threadripper_7960x
amd ryzen_threadripper_7970x_firmware
amd ryzen_threadripper_7970x
amd ryzen_threadripper_7980x_firmware
amd ryzen_threadripper_7980x
amd ryzen_threadripper_pro_7945wx_firmware
amd ryzen_threadripper_pro_7945wx
amd ryzen_threadripper_pro_7955wx_firmware
amd ryzen_threadripper_pro_7955wx
amd ryzen_threadripper_pro_7965wx_firmware
amd ryzen_threadripper_pro_7965wx
amd ryzen_threadripper_pro_7975wx_firmware
amd ryzen_threadripper_pro_7975wx
amd ryzen_threadripper_pro_7985wx_firmware
amd ryzen_threadripper_pro_7985wx
amd ryzen_threadripper_pro_7995wx_firmware
amd ryzen_threadripper_pro_7995wx
amd ryzen_7_4700g_firmware
amd ryzen_7_4700g
amd ryzen_7_4700ge_firmware
amd ryzen_7_4700ge
amd ryzen_5_4600g_firmware
amd ryzen_5_4600g
amd ryzen_5_4600ge_firmware
amd ryzen_5_4600ge
amd ryzen_3_4300g_firmware
amd ryzen_3_4300g
amd ryzen_3_4300ge_firmware
amd ryzen_3_4300ge
amd ryzen_9_4900h_firmware
amd ryzen_9_4900h
amd ryzen_7_4800u_firmware
amd ryzen_7_4800u
amd ryzen_7_4700u_firmware
amd ryzen_7_4700u
amd ryzen_7_4800h_firmware
amd ryzen_7_4800h
amd ryzen_5_4600u_firmware
amd ryzen_5_4600u
amd ryzen_5_4500u_firmware
amd ryzen_5_4500u
amd ryzen_5_4600h_firmware
amd ryzen_5_4600h
amd ryzen_3_4300u_firmware
amd ryzen_3_4300u
amd ryzen_9_5980hx_firmware
amd ryzen_9_5980hx
amd ryzen_9_5980hs_firmware
amd ryzen_9_5980hs
amd ryzen_7_5825u_firmware
amd ryzen_7_5825u
amd ryzen_9_5900hx_firmware
amd ryzen_9_5900hx
amd ryzen_9_5900hs_firmware
amd ryzen_9_5900hs
amd ryzen_7_5825c_firmware
amd ryzen_7_5825c
amd ryzen_7_5800h_firmware
amd ryzen_7_5800h
amd ryzen_5_5625u_firmware
amd ryzen_5_5625u
amd ryzen_7_5800hs_firmware
amd ryzen_7_5800hs
amd ryzen_5_5625c_firmware
amd ryzen_5_5625c
amd ryzen_5_5600h_firmware
amd ryzen_5_5600h
amd ryzen_5_5600hs_firmware
amd ryzen_5_5600hs
amd ryzen_7_5800u_firmware
amd ryzen_7_5800u
amd ryzen_5_5600u_firmware
amd ryzen_5_5600u
amd ryzen_5_5560u_firmware
amd ryzen_5_5560u
amd ryzen_3_5425u_firmware
amd ryzen_3_5425u
amd ryzen_3_5425c_firmware
amd ryzen_3_5425c
amd ryzen_3_5400u_firmware
amd ryzen_3_5400u
amd ryzen_3_5125c_firmware
amd ryzen_3_5125c
amd ryzen_5_7520u_firmware
amd ryzen_5_7520u
amd ryzen_3_7320u_firmware
amd ryzen_3_7320u
amd ryzen_9_6980hx_firmware
amd ryzen_9_6980hx
amd ryzen_9_6980hs_firmware
amd ryzen_9_6980hs
amd ryzen_9_6900hx_firmware
amd ryzen_9_6900hx
amd ryzen_9_6900hs_firmware
amd ryzen_9_6900hs
amd ryzen_7_6800h_firmware
amd ryzen_7_6800h
amd ryzen_7_6800hs_firmware
amd ryzen_7_6800hs
amd ryzen_7_6800u_firmware
amd ryzen_7_6800u
amd ryzen_5_6600h_firmware
amd ryzen_5_6600h
amd ryzen_5_6600hs_firmware
amd ryzen_5_6600hs
amd ryzen_5_6600u_firmware
amd ryzen_5_6600u
amd ryzen_3_7335u_firmware
amd ryzen_3_7335u
amd ryzen_5_7235h_firmware
amd ryzen_5_7235h
amd ryzen_5_7235hs_firmware
amd ryzen_5_7235hs
amd ryzen_5_7535u_firmware
amd ryzen_5_7535u
amd ryzen_5_7535h_firmware
amd ryzen_5_7535h
amd ryzen_5_7535hs_firmware
amd ryzen_5_7535hs
amd ryzen_7_7435h_firmware
amd ryzen_7_7435h
amd ryzen_7_7435hs_firmware
amd ryzen_7_7435hs
amd ryzen_7_7735u_firmware
amd ryzen_7_7735u
amd ryzen_7_7736u_firmware
amd ryzen_7_7736u
amd ryzen_7_7735h_firmware
amd ryzen_7_7735h
amd ryzen_7_7735hs_firmware
amd ryzen_7_7735hs
amd ryzen_3_3250u_firmware
amd ryzen_3_3250u
amd ryzen_3_3250c_firmware
amd ryzen_3_3250c
amd ryzen_3_3200u_firmware
amd ryzen_3_3200u
amd ryzen_7_3780u_firmware
amd ryzen_7_3780u
amd ryzen_7_3750h_firmware
amd ryzen_7_3750h
amd ryzen_7_3700c_firmware
amd ryzen_7_3700c
amd ryzen_7_3700u_firmware
amd ryzen_7_3700u
amd ryzen_5_3580u_firmware
amd ryzen_5_3580u
amd ryzen_5_3550h_firmware
amd ryzen_5_3550h
amd ryzen_5_3500c_firmware
amd ryzen_5_3500c
amd ryzen_5_3500u_firmware
amd ryzen_5_3500u
amd ryzen_5_3450u_firmware
amd ryzen_5_3450u
amd ryzen_3_3350u_firmware
amd ryzen_3_3350u
amd ryzen_3_3300u_firmware
amd ryzen_3_3300u
amd ryzen_3_7440u_firmware
amd ryzen_3_7440u
amd ryzen_5_pro_7540u_firmware
amd ryzen_5_pro_7540u
amd ryzen_5_pro_7545u_firmware
amd ryzen_5_pro_7545u
amd ryzen_5_pro_7640u_firmware
amd ryzen_5_pro_7640u
amd ryzen_5_7640h_firmware
amd ryzen_5_7640h
amd ryzen_5_pro_7640hs_firmware
amd ryzen_5_pro_7640hs
amd ryzen_7_pro_7840u_firmware
amd ryzen_7_pro_7840u
amd ryzen_7_7840h_firmware
amd ryzen_7_7840h
amd ryzen_7_pro_7840hs_firmware
amd ryzen_7_pro_7840hs
amd ryzen_9_7940h_firmware
amd ryzen_9_7940h
amd ryzen_9_pro_7940hs_firmware
amd ryzen_9_pro_7940hs
amd ryzen_5_7645hx_firmware
amd ryzen_5_7645hx
amd ryzen_7_7745hx_firmware
amd ryzen_7_7745hx
amd ryzen_9_7845hx_firmware
amd ryzen_9_7845hx
amd ryzen_9_7945hx_firmware
amd ryzen_9_7945hx
amd ryzen_9_7945hx3d_firmware
amd ryzen_9_7945hx3d
amd ryzen_9_7940hx_firmware
amd ryzen_9_7940hx
amd ryzen_embedded_v2546_firmware
amd ryzen_embedded_v2546
amd ryzen_embedded_v2516_firmware
amd ryzen_embedded_v2516
amd ryzen_embedded_v2718_firmware
amd ryzen_embedded_v2718
amd ryzen_embedded_v2748_firmware
amd ryzen_embedded_v2748
amd ryzen_embedded_v3c14_firmware
amd ryzen_embedded_v3c14
amd ryzen_embedded_v3c44_firmware
amd ryzen_embedded_v3c44
amd ryzen_embedded_v3c16_firmware
amd ryzen_embedded_v3c16
amd ryzen_embedded_v3c18_firmware
amd ryzen_embedded_v3c18
amd ryzen_embedded_v3c48_firmware
amd ryzen_embedded_v3c48

References

Frequently Asked Questions

What is CVE-2023-20579? +
Improper Access Control in the AMD SPI protection feature may allow a user with Ring0 (kernel mode) privileged access to bypass protections potentially resulting in loss of integrity and availability. It has a CVSS v3.1 base score of 6.0 (MEDIUM).
How severe is CVE-2023-20579? +
CVE-2023-20579 has a CVSS v3.1 score of 6.0 out of 10, rated MEDIUM. This is a medium-severity vulnerability that should be remediated as part of regular maintenance.
What products are affected by CVE-2023-20579? +
CVE-2023-20579 affects products from amd, specifically: ryzen_3_3200u, ryzen_3_3200u_firmware, ryzen_3_3250c, ryzen_3_3250c_firmware, ryzen_3_3250u, ryzen_3_3250u_firmware, ryzen_3_3300u, ryzen_3_3300u_firmware, ryzen_3_3350u, ryzen_3_3350u_firmware, ryzen_3_4300g, ryzen_3_4300g_firmware, ryzen_3_4300ge, ryzen_3_4300ge_firmware, ryzen_3_4300u, ryzen_3_4300u_firmware, ryzen_3_5125c, ryzen_3_5125c_firmware, ryzen_3_5300g, ryzen_3_5300g_firmware, ryzen_3_5300ge, ryzen_3_5300ge_firmware, ryzen_3_5400u, ryzen_3_5400u_firmware, ryzen_3_5425c, ryzen_3_5425c_firmware, ryzen_3_5425u, ryzen_3_5425u_firmware, ryzen_3_7320u, ryzen_3_7320u_firmware, ryzen_3_7335u, ryzen_3_7335u_firmware, ryzen_3_7440u, ryzen_3_7440u_firmware, ryzen_5_3450u, ryzen_5_3450u_firmware, ryzen_5_3500c, ryzen_5_3500c_firmware, ryzen_5_3500u, ryzen_5_3500u_firmware, ryzen_5_3550h, ryzen_5_3550h_firmware, ryzen_5_3580u, ryzen_5_3580u_firmware, ryzen_5_4500u, ryzen_5_4500u_firmware, ryzen_5_4600g, ryzen_5_4600g_firmware, ryzen_5_4600ge, ryzen_5_4600ge_firmware, ryzen_5_4600h, ryzen_5_4600h_firmware, ryzen_5_4600u, ryzen_5_4600u_firmware, ryzen_5_5500gt, ryzen_5_5500gt_firmware, ryzen_5_5560u, ryzen_5_5560u_firmware, ryzen_5_5600g, ryzen_5_5600g_firmware, ryzen_5_5600ge, ryzen_5_5600ge_firmware, ryzen_5_5600gt, ryzen_5_5600gt_firmware, ryzen_5_5600h, ryzen_5_5600h_firmware, ryzen_5_5600hs, ryzen_5_5600hs_firmware, ryzen_5_5600u, ryzen_5_5600u_firmware, ryzen_5_5625c, ryzen_5_5625c_firmware, ryzen_5_5625u, ryzen_5_5625u_firmware, ryzen_5_6600h, ryzen_5_6600h_firmware, ryzen_5_6600hs, ryzen_5_6600hs_firmware, ryzen_5_6600u, ryzen_5_6600u_firmware, ryzen_5_7235h, ryzen_5_7235h_firmware, ryzen_5_7235hs, ryzen_5_7235hs_firmware, ryzen_5_7500f, ryzen_5_7500f_firmware, ryzen_5_7520u, ryzen_5_7520u_firmware, ryzen_5_7535h, ryzen_5_7535h_firmware, ryzen_5_7535hs, ryzen_5_7535hs_firmware, ryzen_5_7535u, ryzen_5_7535u_firmware, ryzen_5_7600, ryzen_5_7600_firmware, ryzen_5_7600x, ryzen_5_7600x3d, ryzen_5_7600x3d_firmware, ryzen_5_7600x_firmware, ryzen_5_7640h, ryzen_5_7640h_firmware, ryzen_5_7645hx, ryzen_5_7645hx_firmware, ryzen_5_pro_7540u, ryzen_5_pro_7540u_firmware, ryzen_5_pro_7545u, ryzen_5_pro_7545u_firmware, ryzen_5_pro_7640hs, ryzen_5_pro_7640hs_firmware, ryzen_5_pro_7640u, ryzen_5_pro_7640u_firmware, ryzen_5_pro_7645, ryzen_5_pro_7645_firmware, ryzen_7_3700c, ryzen_7_3700c_firmware, ryzen_7_3700u, ryzen_7_3700u_firmware, ryzen_7_3750h, ryzen_7_3750h_firmware, ryzen_7_3780u, ryzen_7_3780u_firmware, ryzen_7_4700g, ryzen_7_4700g_firmware, ryzen_7_4700ge, ryzen_7_4700ge_firmware, ryzen_7_4700u, ryzen_7_4700u_firmware, ryzen_7_4800h, ryzen_7_4800h_firmware, ryzen_7_4800u, ryzen_7_4800u_firmware, ryzen_7_5700g, ryzen_7_5700g_firmware, ryzen_7_5700ge, ryzen_7_5700ge_firmware, ryzen_7_5800h, ryzen_7_5800h_firmware, ryzen_7_5800hs, ryzen_7_5800hs_firmware, ryzen_7_5800u, ryzen_7_5800u_firmware, ryzen_7_5825c, ryzen_7_5825c_firmware, ryzen_7_5825u, ryzen_7_5825u_firmware, ryzen_7_6800h, ryzen_7_6800h_firmware, ryzen_7_6800hs, ryzen_7_6800hs_firmware, ryzen_7_6800u, ryzen_7_6800u_firmware, ryzen_7_7435h, ryzen_7_7435h_firmware, ryzen_7_7435hs, ryzen_7_7435hs_firmware, ryzen_7_7700, ryzen_7_7700_firmware, ryzen_7_7700x, ryzen_7_7700x_firmware, ryzen_7_7735h, ryzen_7_7735h_firmware, ryzen_7_7735hs, ryzen_7_7735hs_firmware, ryzen_7_7735u, ryzen_7_7735u_firmware, ryzen_7_7736u, ryzen_7_7736u_firmware, ryzen_7_7745hx, ryzen_7_7745hx_firmware, ryzen_7_7800x3d, ryzen_7_7800x3d_firmware, ryzen_7_7840h, ryzen_7_7840h_firmware, ryzen_7_pro_7745, ryzen_7_pro_7745_firmware, ryzen_7_pro_7840hs, ryzen_7_pro_7840hs_firmware, ryzen_7_pro_7840u, ryzen_7_pro_7840u_firmware, ryzen_9_4900h, ryzen_9_4900h_firmware, ryzen_9_5900hs, ryzen_9_5900hs_firmware, ryzen_9_5900hx, ryzen_9_5900hx_firmware, ryzen_9_5980hs, ryzen_9_5980hs_firmware, ryzen_9_5980hx, ryzen_9_5980hx_firmware, ryzen_9_6900hs, ryzen_9_6900hs_firmware, ryzen_9_6900hx, ryzen_9_6900hx_firmware, ryzen_9_6980hs, ryzen_9_6980hs_firmware, ryzen_9_6980hx, ryzen_9_6980hx_firmware, ryzen_9_7845hx, ryzen_9_7845hx_firmware, ryzen_9_7900, ryzen_9_7900_firmware, ryzen_9_7900x, ryzen_9_7900x3d, ryzen_9_7900x3d_firmware, ryzen_9_7900x_firmware, ryzen_9_7940h, ryzen_9_7940h_firmware, ryzen_9_7940hx, ryzen_9_7940hx_firmware, ryzen_9_7945hx, ryzen_9_7945hx3d, ryzen_9_7945hx3d_firmware, ryzen_9_7945hx_firmware, ryzen_9_7950x, ryzen_9_7950x3d, ryzen_9_7950x3d_firmware, ryzen_9_7950x_firmware, ryzen_9_pro_7940hs, ryzen_9_pro_7940hs_firmware, ryzen_9_pro_7945, ryzen_9_pro_7945_firmware, ryzen_embedded_v2516, ryzen_embedded_v2516_firmware, ryzen_embedded_v2546, ryzen_embedded_v2546_firmware, ryzen_embedded_v2718, ryzen_embedded_v2718_firmware, ryzen_embedded_v2748, ryzen_embedded_v2748_firmware, ryzen_embedded_v3c14, ryzen_embedded_v3c14_firmware, ryzen_embedded_v3c16, ryzen_embedded_v3c16_firmware, ryzen_embedded_v3c18, ryzen_embedded_v3c18_firmware, ryzen_embedded_v3c44, ryzen_embedded_v3c44_firmware, ryzen_embedded_v3c48, ryzen_embedded_v3c48_firmware, ryzen_threadripper_7960x, ryzen_threadripper_7960x_firmware, ryzen_threadripper_7970x, ryzen_threadripper_7970x_firmware, ryzen_threadripper_7980x, ryzen_threadripper_7980x_firmware, ryzen_threadripper_pro_7945wx, ryzen_threadripper_pro_7945wx_firmware, ryzen_threadripper_pro_7955wx, ryzen_threadripper_pro_7955wx_firmware, ryzen_threadripper_pro_7965wx, ryzen_threadripper_pro_7965wx_firmware, ryzen_threadripper_pro_7975wx, ryzen_threadripper_pro_7975wx_firmware, ryzen_threadripper_pro_7985wx, ryzen_threadripper_pro_7985wx_firmware, ryzen_threadripper_pro_7995wx, ryzen_threadripper_pro_7995wx_firmware. Check the affected products table above for specific version ranges.
How do I check if I'm vulnerable to CVE-2023-20579? +
You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

Don't wait for an exploit

Scan your website for vulnerabilities like CVE-2023-20579 — free, no signup required.