CVE-2023-20598

CVSS 3.1 Score 7.8 of 10 (high)

Details

Published Oct 17, 2023
Updated: Oct 28, 2023

Summary

CVE-2023-20598 is an improper privilege management vulnerability in the AMD Radeon™ Graphics driver, affecting the products tzul0z and tzul0y. An authenticated attacker could exploit this vulnerability by crafting an IOCTL request to gain I/O control over arbitrary hardware ports or physical addresses, potentially leading to arbitrary code execution. The vulnerability has a base severity rating of HIGH and a base score of 7.8 according to NIST. The privileges required for exploitation are low, and there is no user interaction required. The attack vector is local, and the impact on integrity and confidentiality is assessed as high. The vulnerability has a CVSS vector string of "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H". It poses a significant danger to organizations utilizing the affected AMD Radeon™ Graphics driver versions, as it could allow unauthorized access and execution of arbitrary code.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-20598 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options