CVE-2023-20510

MEDIUM
Published Aug 13, 2024 Modified Dec 12, 2024

Description

An insufficient DRAM address validation in PMFW may allow a privileged attacker to read from an invalid DRAM address to SRAM, potentially resulting in data corruption or denial of service.

Is your site exposed to CVE-2023-20510?

Run a free security scan — no signup, results in seconds.

CVSS v3.1 Score

4.7
MEDIUM
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H

Affected Products

Vendor Product
amd radeon_software
amd radeon_rx_6300m
amd radeon_rx_6400
amd radeon_rx_6450m
amd radeon_rx_6500_xt
amd radeon_rx_6500m
amd radeon_rx_6550m
amd radeon_rx_6550s
amd radeon_rx_6600
amd radeon_rx_6600_xt
amd radeon_rx_6600m
amd radeon_rx_6600s
amd radeon_rx_6650_xt
amd radeon_rx_6650m
amd radeon_rx_6650m_xt
amd radeon_rx_6700
amd radeon_rx_6700_xt
amd radeon_rx_6700m
amd radeon_rx_6700s
amd radeon_rx_6750_gre
amd radeon_rx_6750_xt
amd radeon_rx_6800
amd radeon_rx_6800_xt
amd radeon_rx_6800m
amd radeon_rx_6800s
amd radeon_rx_6850m_xt
amd radeon_rx_6900_xt
amd radeon_rx_6950_xt
amd radeon_software
amd radeon_pro_w6300
amd radeon_pro_w6400
amd radeon_pro_w6600
amd radeon_pro_w6800

References

Frequently Asked Questions

What is CVE-2023-20510? +
An insufficient DRAM address validation in PMFW may allow a privileged attacker to read from an invalid DRAM address to SRAM, potentially resulting in data corruption or denial of service. It has a CVSS v3.1 base score of 4.7 (MEDIUM).
How severe is CVE-2023-20510? +
CVE-2023-20510 has a CVSS v3.1 score of 4.7 out of 10, rated MEDIUM. This is a medium-severity vulnerability that should be remediated as part of regular maintenance.
What products are affected by CVE-2023-20510? +
CVE-2023-20510 affects products from amd, specifically: radeon_pro_w6300, radeon_pro_w6400, radeon_pro_w6600, radeon_pro_w6800, radeon_rx_6300m, radeon_rx_6400, radeon_rx_6450m, radeon_rx_6500_xt, radeon_rx_6500m, radeon_rx_6550m, radeon_rx_6550s, radeon_rx_6600, radeon_rx_6600_xt, radeon_rx_6600m, radeon_rx_6600s, radeon_rx_6650_xt, radeon_rx_6650m, radeon_rx_6650m_xt, radeon_rx_6700, radeon_rx_6700_xt, radeon_rx_6700m, radeon_rx_6700s, radeon_rx_6750_gre, radeon_rx_6750_xt, radeon_rx_6800, radeon_rx_6800_xt, radeon_rx_6800m, radeon_rx_6800s, radeon_rx_6850m_xt, radeon_rx_6900_xt, radeon_rx_6950_xt, radeon_software. Check the affected products table above for specific version ranges.
How do I check if I'm vulnerable to CVE-2023-20510? +
You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

Don't wait for an exploit

Scan your website for vulnerabilities like CVE-2023-20510 — free, no signup required.