ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2023-20597

—
CVSS 3.1
5.5 medium
EPSS
<1%p7
Published
()
Modified
Description

Improper initialization of variables in the DXE driver may allow a privileged user to leak sensitive information via local access.

Vendors
amd
Products
ryzen 3 3100 firmware, ryzen 3 3200g firmware, ryzen 3 3200ge firmware, ryzen 3 3200u firmware, ryzen 3 3250c firmware, ryzen 3 3250u firmware, ryzen 3 3300 firmware, ryzen 3 3300g firmware, ryzen 3 3300u firmware, ryzen 3 3300x firmware, ryzen 3 3350u firmware, ryzen 3 3450u firmware
Weakness
CWE-824, CWE-665
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news

No ingested article mentions this CVE yet.