CVE-2023-20568 : Improper signature verification of RadeonTM RX Vega M Graphics driver for Window

Improper signature verification of RadeonTM RX Vega M Graphics driver for Windows may allow an attacker with admin privileges to launch RadeonInstaller.exe without validating the file signature potentially leading to arbitrary code execution.

Published 2023-11-14 19:15:16

Updated 2023-11-27 18:53:14

Source Advanced Micro Devices Inc.

View at NVD, CVE.org

Products affected by CVE-2023-20568

Intel » Radeon Rx Vega M Firmware
Versions before (<) 23.10.01.46
cpe:2.3:o:intel:radeon_rx_vega_m_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Core I5-8305g » Version: N/A
When used together with: Intel » Core I7-8705g » Version: N/A
When used together with: Intel » Core I7-8706g » Version: N/A
When used together with: Intel » Core I7-8709g » Version: N/A
When used together with: Intel » Nuc 8 Enthusiast Nuc8i7hnkqc » Version: N/A
When used together with: Intel » Nuc 8 Enthusiast Nuc8i7hvkva » Version: N/A
When used together with: Intel » Nuc 8 Enthusiast Nuc8i7hvkvaw » Version: N/A
When used together with: Intel » Nuc Kit Nuc8i7hnk » Version: N/A
When used together with: Intel » Nuc Kit Nuc8i7hvk » Version: N/A
AMD » Radeon Software » Adrenalin Edition
Versions before (<) 23.7.1
cpe:2.3:a:amd:radeon_software:*:*:*:*:adrenalin:*:*:*
Matching versions
When used together with: AMD » Radeon Rx 5300 » Version: N/A
When used together with: AMD » Radeon Rx 5300 Xt » Version: N/A
When used together with: AMD » Radeon Rx 5300m » Version: N/A
When used together with: AMD » Radeon Rx 5500 » Version: N/A
When used together with: AMD » Radeon Rx 5500 Xt » Version: N/A
When used together with: AMD » Radeon Rx 5500m » Version: N/A
When used together with: AMD » Radeon Rx 5600 » Version: N/A
When used together with: AMD » Radeon Rx 5600 Xt » Version: N/A
When used together with: AMD » Radeon Rx 5600m » Version: N/A
When used together with: AMD » Radeon Rx 5700 » Version: N/A
When used together with: AMD » Radeon Rx 5700 Xt » Version: N/A
When used together with: AMD » Radeon Rx 5700m » Version: N/A
When used together with: AMD » Radeon Rx 6300m » Version: N/A
When used together with: AMD » Radeon Rx 6400 » Version: N/A
When used together with: AMD » Radeon Rx 6450m » Version: N/A
When used together with: AMD » Radeon Rx 6500 Xt » Version: N/A
When used together with: AMD » Radeon Rx 6500m » Version: N/A
When used together with: AMD » Radeon Rx 6550m » Version: N/A
When used together with: AMD » Radeon Rx 6550s » Version: N/A
When used together with: AMD » Radeon Rx 6600 » Version: N/A
When used together with: AMD » Radeon Rx 6600 Xt » Version: N/A
When used together with: AMD » Radeon Rx 6600m » Version: N/A
When used together with: AMD » Radeon Rx 6600s » Version: N/A
When used together with: AMD » Radeon Rx 6650 Xt » Version: N/A
When used together with: AMD » Radeon Rx 6650m » Version: N/A
When used together with: AMD » Radeon Rx 6650m Xt » Version: N/A
When used together with: AMD » Radeon Rx 6700 » Version: N/A
When used together with: AMD » Radeon Rx 6700 Xt » Version: N/A
When used together with: AMD » Radeon Rx 6700m » Version: N/A
When used together with: AMD » Radeon Rx 6700s » Version: N/A
When used together with: AMD » Radeon Rx 6800 » Version: N/A
When used together with: AMD » Radeon Rx 6800 Xt » Version: N/A
When used together with: AMD » Radeon Rx 6800m » Version: N/A
When used together with: AMD » Radeon Rx 6800s » Version: N/A
When used together with: AMD » Radeon Rx 6850m Xt » Version: N/A
When used together with: AMD » Radeon Rx 6900 Xt » Version: N/A
When used together with: AMD » Radeon Rx 6950 Xt » Version: N/A
When used together with: AMD » Radeon Rx 7600 » Version: N/A
When used together with: AMD » Radeon Rx 7600m » Version: N/A
When used together with: AMD » Radeon Rx 7600m Xt » Version: N/A
When used together with: AMD » Radeon Rx 7600s » Version: N/A
When used together with: AMD » Radeon Rx 7700 Xt » Version: N/A
When used together with: AMD » Radeon Rx 7700s » Version: N/A
When used together with: AMD » Radeon Rx 7800 Xt » Version: N/A
When used together with: AMD » Radeon Rx 7900 Gre » Version: N/A
When used together with: AMD » Radeon Rx 7900 Xt » Version: N/A
When used together with: AMD » Radeon Rx 7900 Xtx » Version: N/A
When used together with: AMD » Radeon Rx 7900m » Version: N/A
AMD » Radeon Software » PRO Edition
Versions before (<) 23.q3
cpe:2.3:a:amd:radeon_software:*:*:*:*:pro:*:*:*
Matching versions
When used together with: AMD » Radeon Pro W5500 » Version: N/A
When used together with: AMD » Radeon Pro W5500x » Version: N/A
When used together with: AMD » Radeon Pro W5700 » Version: N/A
When used together with: AMD » Radeon Pro W5700x » Version: N/A
When used together with: AMD » Radeon Pro W6300 » Version: N/A
When used together with: AMD » Radeon Pro W6300m » Version: N/A
When used together with: AMD » Radeon Pro W6400 » Version: N/A
When used together with: AMD » Radeon Pro W6500m » Version: N/A
When used together with: AMD » Radeon Pro W6600 » Version: N/A
When used together with: AMD » Radeon Pro W6600m » Version: N/A
When used together with: AMD » Radeon Pro W6600x » Version: N/A
When used together with: AMD » Radeon Pro W6800 » Version: N/A
When used together with: AMD » Radeon Pro W6800x » Version: N/A
When used together with: AMD » Radeon Pro W6800x Duo » Version: N/A
When used together with: AMD » Radeon Pro W6900x » Version: N/A
When used together with: AMD » Radeon Pro W7500 » Version: N/A
When used together with: AMD » Radeon Pro W7600 » Version: N/A
When used together with: AMD » Radeon Pro W7800 » Version: N/A
AMD » Radeon Rx Vega 56 Firmware » Version: N/A
cpe:2.3:o:amd:radeon_rx_vega_56_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Radeon Rx Vega 56 » Version: N/A
AMD » Radeon Rx Vega 64 Firmware » Version: N/A
cpe:2.3:o:amd:radeon_rx_vega_64_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Radeon Rx Vega 64 » Version: N/A
AMD » Radeon Pro Vega 56 Firmware » Version: N/A
cpe:2.3:o:amd:radeon_pro_vega_56_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Radeon Pro Vega 56 » Version: N/A
AMD » Radeon Pro Vega 64 Firmware » Version: N/A
cpe:2.3:o:amd:radeon_pro_vega_64_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Radeon Pro Vega 64 » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2023-20568

EPSS FAQ

0.04%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 6 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2023-20568

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
6.7	MEDIUM	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H	0.8	5.9	NIST
Attack Vector: Local Attack Complexity: Low Privileges Required: High User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

CWE ids for CVE-2023-20568

CWE-347 Improper Verification of Cryptographic Signature

The product does not verify, or incorrectly verifies, the cryptographic signature for data.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2023-20568

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00971.html

INTEL-SA-00971
Vendor Advisory

CVEs referencing this url
https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-6003

AMD Graphics Driver Vulnerabilities – November 2023
Vendor Advisory

CVEs referencing this url

Jump to

Vulnerability Details : CVE-2023-20568

Products affected by CVE-2023-20568

Exploit prediction scoring system (EPSS) score for CVE-2023-20568

CVSS scores for CVE-2023-20568

CWE ids for CVE-2023-20568

References for CVE-2023-20568