Skip to content
fr Sign in
7.9 High

CVE-2023-20599 Improper register access control in ASP may allow a privileged attacker to perform unauthorized access to ASP’s Crypto…

Description

Improper register access control in ASP may allow a privileged attacker to perform unauthorized access to ASP’s Crypto Co-Processor (CCP) registers from x86 resulting in potential loss of control of cryptographic key pointer/index leading to loss of integrity or confidentiality.

Affected products and versions

Product Affected versions Fixed in
AMD EPYC™ 7002 Series Processors Versions not published
AMD Ryzen™ Threadripper™ 3000 Processors Versions not published
AMD Ryzen™ Threadripper™ PRO 3000 WX Processors Versions not published
AMD Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics Versions not published
AMD EPYC™ Embedded 7002 Series Processors Versions not published
AMD EPYC™ Embedded 7003 Series Processors Versions not published
AMD Ryzen™ Embedded R1000 Series Processors Versions not published
AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics Versions not published
AMD Ryzen™ Embedded R2000 Series Processors Versions not published
Show the other branch
Product Affected versions Fixed in
AMD Ryzen™ Embedded V1000 Series Processors Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of AMD EPYC™ 7002 Series Processors

The 16 CVEs of AMD EPYC™ 7002 Series Processors →
CVE-2025-54518 Improper isolation of shared resources within the CPU operation cache on Zen 2-based products could allow an attacker to… 7.3 High CVE-2026-0432 Incorrect default permissions in the installation directory for the AMD chipset driver could allow an attacker to… 8.5 High CVE-2025-48512 Incorrect default permissions in the installation directory for the AMD general-purpose input/output controller (GPIO)… 7.0 High CVE-2025-54502 Incorrect use of boot service in the AMD Platform Configuration Blob (APCB) SMM driver could allow a privileged attacker… 7.1 High
Track this CVE