CVE-2023-20589: fTPM Voltage Fault Injection

Severity: medium (CVSS 6.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-08-08 · updated 2026-06-17

Description

An attacker with specialized hardware and physical access to an impacted device may be able to perform a voltage fault injection attack resulting in compromise of the ASP secure boot potentially leading to arbitrary code execution.

Affected products

AMD 4700S Firmware: all versions
AMD Athlon Gold 3150C Firmware: all versions
AMD Athlon Gold 3150G Firmware: all versions
AMD Athlon Gold 3150Ge Firmware: all versions
AMD Athlon Gold 3150U Firmware: all versions
AMD Athlon Gold Pro 3150G Firmware: all versions
AMD Athlon Gold Pro 3150Ge Firmware: all versions
AMD Athlon Pro 300Ge Firmware: all versions
AMD Athlon Pro 3045B Firmware: all versions
AMD Athlon Pro 3145B Firmware: all versions
AMD Athlon Silver 3050C Firmware: all versions
AMD Athlon Silver 3050E Firmware: all versions
AMD Athlon Silver 3050U Firmware: all versions
AMD Ryzen 3 3100 Firmware: all versions
AMD Ryzen 3 3200G Firmware: all versions
AMD Ryzen 3 3200Ge Firmware: all versions
AMD Ryzen 3 3300X Firmware: all versions
AMD Ryzen 3 4100 Firmware: all versions
AMD Ryzen 3 4300G Firmware: all versions
AMD Ryzen 3 4300Ge Firmware: all versions
AMD Ryzen 3 5100 Firmware: all versions
AMD Ryzen 3 5125C Firmware: all versions
AMD Ryzen 3 5300G Firmware: all versions
AMD Ryzen 3 5300Ge Firmware: all versions
AMD Ryzen 3 5300U Firmware: all versions
AMD Ryzen 3 5400U Firmware: all versions
AMD Ryzen 3 5425U Firmware: all versions
AMD Ryzen 3 7320U Firmware: all versions
AMD Ryzen 3 7335U Firmware: all versions
AMD Ryzen 3 Pro 3200G Firmware: all versions

References

Get alerted when CVE-2023-20589 or the next vulnerability affects your stack