CVE-2023-20597
Medium
Description
Improper initialization of variables in the DXE driver may allow a privileged user to leak sensitive information via local access.
SeverityMedium
CVSS5.5
Exploit probability—
ProductAmd Ryzen 3 3100 Firmware
PublishedSep 20, 2023
First seenSep 20, 2023
Weakness typeCWE-824CWE-824
How to fix
Vendor advisories
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| amd ryzen_3_3100_firmware | comboam4pi_1.0.0.9, comboam4v2pi_1.2.0.8 | — |
| amd ryzen_3_3200g_firmware | comboam4pi_1.0.0.9, comboam4v2pi_1.2.0.8 | — |
| amd ryzen_3_3200ge_firmware | comboam4pi_1.0.0.9, comboam4v2pi_1.2.0.8 | — |
| amd ryzen_3_3200u_firmware | comboam4pi_1.0.0.9, comboam4v2pi_1.2.0.8 | — |
| amd ryzen_3_3250c_firmware | comboam4pi_1.0.0.9, comboam4v2pi_1.2.0.8 | — |
| amd ryzen_3_3250u_firmware | comboam4pi_1.0.0.9, comboam4v2pi_1.2.0.8 | — |
| amd ryzen_3_3300_firmware | comboam4pi_1.0.0.9, comboam4v2pi_1.2.0.8 | — |
| amd ryzen_3_3300g_firmware | comboam4pi_1.0.0.9, comboam4v2pi_1.2.0.8 | — |
| amd ryzen_3_3300u_firmware | comboam4pi_1.0.0.9, comboam4v2pi_1.2.0.8 | — |
| amd ryzen_3_3300x_firmware | comboam4pi_1.0.0.9, comboam4v2pi_1.2.0.8 | — |
| amd ryzen_3_3350u_firmware | comboam4pi_1.0.0.9, comboam4v2pi_1.2.0.8 | — |
| amd ryzen_3_3450u_firmware | comboam4pi_1.0.0.9, comboam4v2pi_1.2.0.8 | — |
| amd ryzen_3_3500c_firmware | comboam4pi_1.0.0.9, comboam4v2pi_1.2.0.8 | — |
| amd ryzen_3_3500u_firmware | comboam4pi_1.0.0.9, comboam4v2pi_1.2.0.8 | — |
| amd ryzen_3_3550h_firmware | comboam4pi_1.0.0.9, comboam4v2pi_1.2.0.8 | — |
| amd ryzen_3_3580u_firmware | comboam4pi_1.0.0.9, comboam4v2pi_1.2.0.8 | — |
| amd ryzen_3_3700c_firmware | comboam4pi_1.0.0.9, comboam4v2pi_1.2.0.8 | — |
| amd ryzen_3_3700u_firmware | comboam4pi_1.0.0.9, comboam4v2pi_1.2.0.8 | — |
| amd ryzen_3_3750h_firmware | comboam4pi_1.0.0.9, comboam4v2pi_1.2.0.8 | — |
| amd ryzen_3_3780u_firmware | comboam4pi_1.0.0.9, comboam4v2pi_1.2.0.8 | — |
| amd ryzen_3100_firmware | comboam4pi_1.0.0.9, comboam4v2pi_1.2.0.8 | — |
| amd ryzen_3300x_firmware | comboam4pi_1.0.0.9, comboam4v2pi_1.2.0.8 | — |
| amd ryzen_3500_firmware | comboam4pi_1.0.0.9, comboam4v2pi_1.2.0.8 | — |
| amd ryzen_3500x_firmware | comboam4pi_1.0.0.9, comboam4v2pi_1.2.0.8 | — |
| amd ryzen_3600_firmware | comboam4pi_1.0.0.9, comboam4v2pi_1.2.0.8 | — |
| amd ryzen_3600x_firmware | comboam4pi_1.0.0.9, comboam4v2pi_1.2.0.8 | — |
| amd ryzen_3600xt_firmware | comboam4pi_1.0.0.9, comboam4v2pi_1.2.0.8 | — |
| amd ryzen_3800x_firmware | comboam4pi_1.0.0.9, comboam4v2pi_1.2.0.8 | — |
| amd ryzen_3800xt_firmware | comboam4pi_1.0.0.9, comboam4v2pi_1.2.0.8 | — |
| amd ryzen_3900_firmware | comboam4pi_1.0.0.9, comboam4v2pi_1.2.0.8 | — |
| amd ryzen_3900x_firmware | comboam4pi_1.0.0.9, comboam4v2pi_1.2.0.8 | — |
| amd ryzen_3900xt_firmware | comboam4pi_1.0.0.9, comboam4v2pi_1.2.0.8 | — |
| amd ryzen_3945wx_firmware | comboam4pi_1.0.0.9, comboam4v2pi_1.2.0.8 | — |
| amd ryzen_3950x_firmware | comboam4pi_1.0.0.9, comboam4v2pi_1.2.0.8 | — |
| amd ryzen_3955wx_firmware | comboam4pi_1.0.0.9, comboam4v2pi_1.2.0.8 | — |
| amd ryzen_3960x_firmware | comboam4pi_1.0.0.9, comboam4v2pi_1.2.0.8 | — |
| amd ryzen_3970x_firmware | comboam4pi_1.0.0.9, comboam4v2pi_1.2.0.8 | — |
| amd ryzen_3975wx_firmware | comboam4pi_1.0.0.9, comboam4v2pi_1.2.0.8 | — |
| amd ryzen_3990x_firmware | comboam4pi_1.0.0.9, comboam4v2pi_1.2.0.8 | — |
| amd ryzen_3995wx_firmware | comboam4pi_1.0.0.9, comboam4v2pi_1.2.0.8 | — |
| amd ryzen_5_5500_firmware | comboam4v2pi_1.2.0.8, cezannepi-fp6_1.0.0.b | — |
| amd ryzen_5_5500u_firmware | comboam4v2pi_1.2.0.8, cezannepi-fp6_1.0.0.b | — |
| amd ryzen_5_5560u_firmware | comboam4v2pi_1.2.0.8, cezannepi-fp6_1.0.0.b | — |
| amd ryzen_5_5600_firmware | comboam4v2pi_1.2.0.8, cezannepi-fp6_1.0.0.b | — |
| amd ryzen_5_5600g_firmware | comboam4v2pi_1.2.0.8, cezannepi-fp6_1.0.0.b | — |
| amd ryzen_5_5600ge_firmware | comboam4v2pi_1.2.0.8, cezannepi-fp6_1.0.0.b | — |
| amd ryzen_5_5600h_firmware | comboam4v2pi_1.2.0.8, cezannepi-fp6_1.0.0.b | — |
| amd ryzen_5_5600hs_firmware | comboam4v2pi_1.2.0.8, cezannepi-fp6_1.0.0.b | — |
| amd ryzen_5_5600u_firmware | comboam4v2pi_1.2.0.8, cezannepi-fp6_1.0.0.b | — |
| amd ryzen_5_5600x_firmware | comboam4v2pi_1.2.0.8, cezannepi-fp6_1.0.0.b | — |
| amd ryzen_5_5600x3d_firmware | comboam4v2pi_1.2.0.8, cezannepi-fp6_1.0.0.b | — |
| amd ryzen_5_5625c_firmware | comboam4v2pi_1.2.0.8, cezannepi-fp6_1.0.0.b | — |
| amd ryzen_5_5625u_firmware | comboam4v2pi_1.2.0.8, cezannepi-fp6_1.0.0.b | — |
| amd ryzen_5_5700g_firmware | comboam4v2pi_1.2.0.8, cezannepi-fp6_1.0.0.b | — |
| amd ryzen_5_5700ge_firmware | comboam4v2pi_1.2.0.8, cezannepi-fp6_1.0.0.b | — |
| amd ryzen_5300g_firmware | comboam4v2pi_1.2.0.8, cezannepi-fp6_1.0.0.b | — |
| amd ryzen_5300ge_firmware | comboam4v2pi_1.2.0.8, cezannepi-fp6_1.0.0.b | — |
| amd ryzen_5500_firmware | comboam4v2pi_1.2.0.8, cezannepi-fp6_1.0.0.b | — |
| amd ryzen_5600_firmware | comboam4v2pi_1.2.0.8, cezannepi-fp6_1.0.0.b | — |
| amd ryzen_5600g_firmware | comboam4v2pi_1.2.0.8, cezannepi-fp6_1.0.0.b | — |
| amd ryzen_5600ge_firmware | comboam4v2pi_1.2.0.8, cezannepi-fp6_1.0.0.b | — |
| amd ryzen_5600x_firmware | comboam4v2pi_1.2.0.8, cezannepi-fp6_1.0.0.b | — |
| amd ryzen_5700g_firmware | comboam4v2pi_1.2.0.8, cezannepi-fp6_1.0.0.b | — |
| amd ryzen_5700ge_firmware | comboam4v2pi_1.2.0.8, cezannepi-fp6_1.0.0.b | — |
| amd ryzen_5700x_firmware | comboam4v2pi_1.2.0.8, cezannepi-fp6_1.0.0.b | — |
| amd ryzen_5800_firmware | comboam4v2pi_1.2.0.8, cezannepi-fp6_1.0.0.b | — |
| amd ryzen_5800x_firmware | comboam4v2pi_1.2.0.8, cezannepi-fp6_1.0.0.b | — |
| amd ryzen_5800x3d_firmware | comboam4v2pi_1.2.0.8, cezannepi-fp6_1.0.0.b | — |
| amd ryzen_5900_firmware | comboam4v2pi_1.2.0.8, cezannepi-fp6_1.0.0.b | — |
| amd ryzen_5900x_firmware | comboam4v2pi_1.2.0.8, cezannepi-fp6_1.0.0.b | — |
| amd ryzen_5945wx_firmware | comboam4v2pi_1.2.0.8, cezannepi-fp6_1.0.0.b | — |
| amd ryzen_5950x_firmware | comboam4v2pi_1.2.0.8, cezannepi-fp6_1.0.0.b | — |
| amd ryzen_5955wx_firmware | comboam4v2pi_1.2.0.8, cezannepi-fp6_1.0.0.b | — |
| amd ryzen_5965wx_firmware | comboam4v2pi_1.2.0.8, cezannepi-fp6_1.0.0.b | — |
| amd ryzen_5975wx_firmware | comboam4v2pi_1.2.0.8, cezannepi-fp6_1.0.0.b | — |
| amd ryzen_5995wx_firmware | comboam4v2pi_1.2.0.8, cezannepi-fp6_1.0.0.b | — |
| amd ryzen_threadripper_3960x_firmware | castlepeakpi-sp3r3_1.0.0.8 | — |
| amd ryzen_threadripper_3970x_firmware | castlepeakpi-sp3r3_1.0.0.8 | — |
| amd ryzen_threadripper_3990x_firmware | castlepeakpi-sp3r3_1.0.0.8 | — |
| amd ryzen_threadripper_pro_3795wx_firmware | castlepeakwspi-swrx8_1.0.0.a, chagallwspi-swrx8_1.0.0.4 | — |
| amd ryzen_threadripper_pro_3945wx_firmware | castlepeakwspi-swrx8_1.0.0.a, chagallwspi-swrx8_1.0.0.4 | — |
| amd ryzen_threadripper_pro_3955wx_firmware | castlepeakwspi-swrx8_1.0.0.a, chagallwspi-swrx8_1.0.0.4 | — |
| amd ryzen_threadripper_pro_3975wx_firmware | castlepeakwspi-swrx8_1.0.0.a, chagallwspi-swrx8_1.0.0.4 | — |
| amd ryzen_threadripper_pro_3995wx_firmware | castlepeakwspi-swrx8_1.0.0.a, chagallwspi-swrx8_1.0.0.4 | — |
| amd ryzen_4300g_firmware | renoirpi-fp6_1.0.0.9 | — |
| amd ryzen_4300ge_firmware | renoirpi-fp6_1.0.0.9 | — |
| amd ryzen_4600g_firmware | renoirpi-fp6_1.0.0.9 | — |
| amd ryzen_4600ge_firmware | renoirpi-fp6_1.0.0.9 | — |
| amd ryzen_4700g_firmware | renoirpi-fp6_1.0.0.9 | — |
| amd ryzen_4700ge_firmware | renoirpi-fp6_1.0.0.9 | — |
| amd ryzen_4700s_firmware | renoirpi-fp6_1.0.0.9 | — |
| amd ryzen_6600h_firmware | rembrandtpi-fp7_1.0.0.6 | — |
| amd ryzen_6600hs_firmware | rembrandtpi-fp7_1.0.0.6 | — |
| amd ryzen_6600u_firmware | rembrandtpi-fp7_1.0.0.6 | — |
| amd ryzen_6800h_firmware | rembrandtpi-fp7_1.0.0.6 | — |
| amd ryzen_6800hs_firmware | rembrandtpi-fp7_1.0.0.6 | — |
| amd ryzen_6800u_firmware | rembrandtpi-fp7_1.0.0.6 | — |
| amd ryzen_6900hs_firmware | rembrandtpi-fp7_1.0.0.6 | — |
| amd ryzen_6900hx_firmware | rembrandtpi-fp7_1.0.0.6 | — |
| amd ryzen_6980hs_firmware | rembrandtpi-fp7_1.0.0.6 | — |
| amd ryzen_6980hx_firmware | rembrandtpi-fp7_1.0.0.6 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.