CVE-2023-20589: AMD 4700s Firmware

Medium severity, CVSS 6.8. EPSS: 0.6% chance of exploitation in the next 30 days.

An attacker with specialized hardware and physical access to an impacted device may be able to perform a voltage fault injection attack resulting in compromise of the ASP secure boot potentially leading to arbitrary code execution. 

Affected products

• AMD 4700s Firmware: affected versions not specified
• AMD Athlon Gold 3150c Firmware: affected versions not specified
• AMD Athlon Gold 3150g Firmware: affected versions not specified
• AMD Athlon Gold 3150ge Firmware: affected versions not specified
• AMD Athlon Gold 3150u Firmware: affected versions not specified
• AMD Athlon Gold Pro 3150g Firmware: affected versions not specified
• AMD Athlon Gold Pro 3150ge Firmware: affected versions not specified
• AMD Athlon Pro 300ge Firmware: affected versions not specified
• AMD Athlon Pro 3045b Firmware: affected versions not specified
• AMD Athlon Pro 3145b Firmware: affected versions not specified
• AMD Athlon Silver 3050c Firmware: affected versions not specified
• AMD Athlon Silver 3050e Firmware: affected versions not specified
• AMD Athlon Silver 3050u Firmware: affected versions not specified
• AMD Ryzen 3 3100 Firmware: affected versions not specified
• AMD Ryzen 3 3200g Firmware: affected versions not specified
• AMD Ryzen 3 3200ge Firmware: affected versions not specified
• AMD Ryzen 3 3300x Firmware: affected versions not specified
• AMD Ryzen 3 4100 Firmware: affected versions not specified
• AMD Ryzen 3 4300g Firmware: affected versions not specified
• AMD Ryzen 3 4300ge Firmware: affected versions not specified
• AMD Ryzen 3 5100 Firmware: affected versions not specified
• AMD Ryzen 3 5125c Firmware: affected versions not specified
• AMD Ryzen 3 5300g Firmware: affected versions not specified
• AMD Ryzen 3 5300ge Firmware: affected versions not specified
• AMD Ryzen 3 5300u Firmware: affected versions not specified
• and 97 more

Published 2023-08-08. Last modified 2026-06-17.