CVE-2023-20572

Published Jun 26, 2026 CVSS 4.0 · 5.6 Medium EPSS < 1% KEV · Not listed
Description
An observable timing discrepancy in the ASP could allow a privileged attacker to perform a brute-force attack against the hash message authentication code, allowing the input of an arbitrary message, potentially leading to a loss of data integrity.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History
Type Values Removed Values Added
First Time appeared Amd
Amd athlon 3000 Series Mobile Processors With Radeon Graphics
Amd ryzen 3000 Series Desktop Processors
Amd ryzen 4000 Series Desktop Processors
Amd ryzen 4000 Series Mobile Processors With Radeon Graphics
Amd ryzen 5000 Series Desktop Processors
Amd ryzen 5000 Series Processors With Radeon Graphics
Amd ryzen 6000 Series Processors With Radeon Graphics
Amd ryzen 7000 Series Desktop Processors
Amd ryzen 7020 Series Processors With Radeon Graphics
Amd ryzen 7030 Series Mobile Processors With Radeon Graphics
Amd ryzen 8000 Series Desktop Processors
Amd ryzen Threadripper 3000 Series Processors
Amd ryzen Threadripper 7000 Processors
Amd ryzen Threadripper Pro 3000 Wx-series Processors
Amd ryzen Threadripper Pro 5000 Wx-series Processors
Amd ryzen Threadripper Pro 7000 Wx-series Processors
Vendors & Products Amd
Amd athlon 3000 Series Mobile Processors With Radeon Graphics
Amd ryzen 3000 Series Desktop Processors
Amd ryzen 4000 Series Desktop Processors
Amd ryzen 4000 Series Mobile Processors With Radeon Graphics
Amd ryzen 5000 Series Desktop Processors
Amd ryzen 5000 Series Processors With Radeon Graphics
Amd ryzen 6000 Series Processors With Radeon Graphics
Amd ryzen 7000 Series Desktop Processors
Amd ryzen 7020 Series Processors With Radeon Graphics
Amd ryzen 7030 Series Mobile Processors With Radeon Graphics
Amd ryzen 8000 Series Desktop Processors
Amd ryzen Threadripper 3000 Series Processors
Amd ryzen Threadripper 7000 Processors
Amd ryzen Threadripper Pro 3000 Wx-series Processors
Amd ryzen Threadripper Pro 5000 Wx-series Processors
Amd ryzen Threadripper Pro 7000 Wx-series Processors
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Type Values Removed Values Added
Description An observable timing discrepancy in the ASP could allow a privileged attacker to perform a brute-force attack against the hash message authentication code, allowing the input of an arbitrary message, potentially leading to a loss of data integrity.
Weaknesses CWE-208
References
Metrics cvssV4_0

{'score': 5.6, 'vector': 'CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N'}