CVE-2023-31339 - Vulnerability Details

Vendors	Products
Amd	Trusted Firmware-a Zu11eg Zu15eg Zu17eg Zu19eg Zu1cg Zu1eg Zu21dr Zu25dr Zu27dr Zu28dr Zu29dr Zu2cg Zu2eg Zu39dr Zu3cg Zu3eg Zu3tcg Zu3teg Zu42dr Zu43dr Zu46dr Zu47dr Zu48dr Zu49dr Zu4cg Zu4eg Zu4ev Zu5cg Zu5eg Zu5ev Zu63dr Zu64dr Zu65dr Zu67dr Zu6cg Zu6eg Zu7cg Zu7eg Zu7ev Zu9cg Zu9eg
Arm	Trusted Firmware-a

Link	Providers
https://www.amd.com/en/resources/product-security/bulletin/amd-sb-8002

Type	Values Removed	Values Added
First Time appeared		Amd Amd trusted Firmware-a Amd zu11eg Amd zu15eg Amd zu17eg Amd zu19eg Amd zu1cg Amd zu1eg Amd zu21dr Amd zu25dr Amd zu27dr Amd zu28dr Amd zu29dr Amd zu2cg Amd zu2eg Amd zu39dr Amd zu3cg Amd zu3eg Amd zu3tcg Amd zu3teg Amd zu42dr Amd zu43dr Amd zu46dr Amd zu47dr Amd zu48dr Amd zu49dr Amd zu4cg Amd zu4eg Amd zu4ev Amd zu5cg Amd zu5eg Amd zu5ev Amd zu63dr Amd zu64dr Amd zu65dr Amd zu67dr Amd zu6cg Amd zu6eg Amd zu7cg Amd zu7eg Amd zu7ev Amd zu9cg Amd zu9eg Arm Arm trusted Firmware-a
Weaknesses		CWE-125
CPEs		cpe:2.3:h:amd:zu11eg:-:::::::* cpe:2.3:h:amd:zu15eg:-:::::::* cpe:2.3:h:amd:zu17eg:-:::::::* cpe:2.3:h:amd:zu19eg:-:::::::* cpe:2.3:h:amd:zu1cg:-:::::::* cpe:2.3:h:amd:zu1eg:-:::::::* cpe:2.3:h:amd:zu21dr:-:::::::* cpe:2.3:h:amd:zu25dr:-:::::::* cpe:2.3:h:amd:zu27dr:-:::::::* cpe:2.3:h:amd:zu28dr:-:::::::* cpe:2.3:h:amd:zu29dr:-:::::::* cpe:2.3:h:amd:zu2cg:-:::::::* cpe:2.3:h:amd:zu2eg:-:::::::* cpe:2.3:h:amd:zu39dr:-:::::::* cpe:2.3:h:amd:zu3cg:-:::::::* cpe:2.3:h:amd:zu3eg:-:::::::* cpe:2.3:h:amd:zu3tcg:-:::::::* cpe:2.3:h:amd:zu3teg:-:::::::* cpe:2.3:h:amd:zu42dr:-:::::::* cpe:2.3:h:amd:zu43dr:-:::::::* cpe:2.3:h:amd:zu46dr:-:::::::* cpe:2.3:h:amd:zu47dr:-:::::::* cpe:2.3:h:amd:zu48dr:-:::::::* cpe:2.3:h:amd:zu49dr:-:::::::* cpe:2.3:h:amd:zu4cg:-:::::::* cpe:2.3:h:amd:zu4eg:-:::::::* cpe:2.3:h:amd:zu4ev:-:::::::* cpe:2.3:h:amd:zu5cg:-:::::::* cpe:2.3:h:amd:zu5eg:-:::::::* cpe:2.3:h:amd:zu5ev:-:::::::* cpe:2.3:h:amd:zu63dr:-:::::::* cpe:2.3:h:amd:zu64dr:-:::::::* cpe:2.3:h:amd:zu65dr:-:::::::* cpe:2.3:h:amd:zu67dr:-:::::::* cpe:2.3:h:amd:zu6cg:-:::::::* cpe:2.3:h:amd:zu6eg:-:::::::* cpe:2.3:h:amd:zu7cg:-:::::::* cpe:2.3:h:amd:zu7eg:-:::::::* cpe:2.3:h:amd:zu7ev:-:::::::* cpe:2.3:h:amd:zu9cg:-:::::::* cpe:2.3:h:amd:zu9eg:-:::::::* cpe:2.3:o:amd:trusted_firmware-a:::::::: cpe:2.3:o:arm:trusted_firmware-a::::::::
Vendors & Products		Amd Amd trusted Firmware-a Amd zu11eg Amd zu15eg Amd zu17eg Amd zu19eg Amd zu1cg Amd zu1eg Amd zu21dr Amd zu25dr Amd zu27dr Amd zu28dr Amd zu29dr Amd zu2cg Amd zu2eg Amd zu39dr Amd zu3cg Amd zu3eg Amd zu3tcg Amd zu3teg Amd zu42dr Amd zu43dr Amd zu46dr Amd zu47dr Amd zu48dr Amd zu49dr Amd zu4cg Amd zu4eg Amd zu4ev Amd zu5cg Amd zu5eg Amd zu5ev Amd zu63dr Amd zu64dr Amd zu65dr Amd zu67dr Amd zu6cg Amd zu6eg Amd zu7cg Amd zu7eg Amd zu7ev Amd zu9cg Amd zu9eg Arm Arm trusted Firmware-a

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Type	Values Removed	Values Added
Description		Improper input validation in ARM® Trusted Firmware used in AMD’s Zynq™ UltraScale+™) MPSoC/RFSoC may allow a privileged attacker to perform out of bound reads, potentially resulting in data leakage and denial of service.
Weaknesses		CWE-20
References		https://www.amd.com/en/resources/product-security/bulletin/amd-sb-8002
Metrics		cvssV3_1 `{'score': 4.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:H'}`

Show plain JSON

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2023-31339", "assignerOrgId": "b58fc414-a1e4-4f92-9d70-1add41838648", "state": "PUBLISHED", "assignerShortName": "AMD", "dateReserved": "2023-04-27T15:25:41.425Z", "datePublished": "2024-08-13T16:56:22.024Z", "dateUpdated": "2024-08-15T15:18:21.699Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "affected", "product": "Zynq\u2122 UltraScale+\u2122 MPSoC/RFSoC", "vendor": "AMD", "versions": [{"lessThan": "2023.2", "status": "affected", "version": "0", "versionType": "custom"}]}], "datePublic": "2024-08-13T04:00:00.000Z", "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<span style=\"background-color: rgb(255, 255, 255);\">\n\n<span style=\"background-color: rgb(255, 255, 255);\">Improper input validation in ARM\u00ae Trusted Firmware used in AMD\u2019s Zynq\u2122 UltraScale+\u2122) MPSoC/RFSoC may allow a privileged attacker to perform out of bound reads, potentially resulting in data leakage and denial of service.</span>\n\n</span>\n\n\n\n\n\n<br>"}], "value": "Improper input validation in ARM\u00ae Trusted Firmware used in AMD\u2019s Zynq\u2122 UltraScale+\u2122) MPSoC/RFSoC may allow a privileged attacker to perform out of bound reads, potentially resulting in data leakage and denial of service."}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 4.8, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-20", "description": "CWE-20 Improper Input Validation", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "b58fc414-a1e4-4f92-9d70-1add41838648", "shortName": "AMD", "dateUpdated": "2024-08-13T16:56:22.024Z"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://www.amd.com/en/resources/product-security/bulletin/amd-sb-8002"}], "source": {"advisory": "AMD-SB-1016", "discovery": "EXTERNAL"}, "x_generator": {"engine": "Vulnogram 0.0.9"}, "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "psirt@amd.com", "DATE_PUBLIC": "2021-11-09T20:30:00.000Z", "ID": "CVE-2021-26334", "STATE": "PUBLIC", "TITLE": "AMD Chipset Driver Information Disclosure Vulnerability"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "\u03bcProf Tool", "version": {"version_data": [{"version_affected": "<", "version_name": "\u03bcProf Tool", "version_value": "3.4.494"}]}}]}, "vendor_name": "AMD"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "The AMDPowerProfiler.sys driver of AMD \u03bcProf tool may allow lower privileged users to access MSRs in kernel which may lead to privilege escalation and ring-0 code execution by the lower privileged user."}]}, "generator": {"engine": "Vulnogram 0.0.9"}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "CWE-284 Improper Access Control"}]}]}, "references": {"reference_data": [{"name": "https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1016", "refsource": "MISC", "url": "https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1016"}]}, "source": {"advisory": "AMD-SB-1016", "discovery": "EXTERNAL"}}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-08-15T15:18:02.945530Z", "id": "CVE-2023-31339", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-08-15T15:18:21.699Z"}}]}}

{

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

cveMetadata : { »

cveId : CVE-2023-31339 (string)

assignerOrgId : b58fc414-a1e4-4f92-9d70-1add41838648 (string)

state : PUBLISHED (string)

assignerShortName : AMD (string)

dateReserved : 2023-04-27T15:25:41.425Z (string)

datePublished : 2024-08-13T16:56:22.024Z (string)

dateUpdated : 2024-08-15T15:18:21.699Z (string)

}

containers : { »

cna : { »

affected : [ »

0 : { »

defaultStatus : affected (string)

product : Zynq™ UltraScale+™ MPSoC/RFSoC (string)

vendor : AMD (string)

versions : [ »

0 : { »

lessThan : 2023.2 (string)

status : affected (string)

version : 0 (string)

versionType : custom (string)

}

]

}

]

datePublic : 2024-08-13T04:00:00.000Z (string)

descriptions : [ »

0 : { »

lang : en (string)

supportingMedia : [ »

0 : { »

base64 : false (boolean)

type : text/html (string)

value : Improper input validation in ARM® Trusted Firmware used in AMD’s Zynq™ UltraScale+™) MPSoC/RFSoC may allow a privileged attacker to perform out of bound reads, potentially resulting in data leakage and denial of service. (string)

}

]

value : Improper input validation in ARM® Trusted Firmware used in AMD’s Zynq™ UltraScale+™) MPSoC/RFSoC may allow a privileged attacker to perform out of bound reads, potentially resulting in data leakage and denial of service. (string)

}

]

metrics : [ »

0 : { »

cvssV3_1 : { »

attackComplexity : LOW (string)

attackVector : LOCAL (string)

availabilityImpact : HIGH (string)

baseScore : 4.8 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : LOW (string)

integrityImpact : NONE (string)

privilegesRequired : HIGH (string)

scope : UNCHANGED (string)

userInteraction : REQUIRED (string)

vectorString : CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:H (string)

version : 3.1 (string)

}

format : CVSS (string)

scenarios : [ »

0 : { »

lang : en (string)

value : GENERAL (string)

}

]

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

cweId : CWE-20 (string)

description : CWE-20 Improper Input Validation (string)

lang : en (string)

type : CWE (string)

}

]

}

]

providerMetadata : { »

orgId : b58fc414-a1e4-4f92-9d70-1add41838648 (string)

shortName : AMD (string)

dateUpdated : 2024-08-13T16:56:22.024Z (string)

}

references : [ »

0 : { »

tags : [ »

0 : x_refsource_MISC (string)

]

url : https://www.amd.com/en/resources/product-security/bulletin/amd-sb-8002 (string)

}

]

source : { »

advisory : AMD-SB-1016 (string)

discovery : EXTERNAL (string)

}

x_generator : { »

engine : Vulnogram 0.0.9 (string)

}

x_legacyV4Record : { »

CVE_data_meta : { »

ASSIGNER : psirt@amd.com (string)

DATE_PUBLIC : 2021-11-09T20:30:00.000Z (string)

ID : CVE-2021-26334 (string)

STATE : PUBLIC (string)

TITLE : AMD Chipset Driver Information Disclosure Vulnerability (string)

}

affects : { »

vendor : { »

vendor_data : [ »

0 : { »

product : { »

product_data : [ »

0 : { »

product_name : μProf Tool (string)

version : { »

version_data : [ »

0 : { »

version_affected : < (string)

version_name : μProf Tool (string)

version_value : 3.4.494 (string)

}

]

}

]

}

vendor_name : AMD (string)

}

]

}

data_format : MITRE (string)

data_type : CVE (string)

data_version : 4.0 (string)

description : { »

description_data : [ »

0 : { »

lang : eng (string)

value : The AMDPowerProfiler.sys driver of AMD μProf tool may allow lower privileged users to access MSRs in kernel which may lead to privilege escalation and ring-0 code execution by the lower privileged user. (string)

}

]

}

generator : { »

engine : Vulnogram 0.0.9 (string)

}

problemtype : { »

problemtype_data : [ »

0 : { »

description : [ »

0 : { »

lang : eng (string)

value : CWE-284 Improper Access Control (string)

}

]

}

]

}

references : { »

reference_data : [ »

0 : { »

name : https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1016 (string)

refsource : MISC (string)

url : https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1016 (string)

}

]

}

source : { »

advisory : AMD-SB-1016 (string)

discovery : EXTERNAL (string)

}

adp : [ »

0 : { »

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

timestamp : 2024-08-15T15:18:02.945530Z (string)

id : CVE-2023-31339 (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : partial (string)

}

]

role : CISA Coordinator (string)

version : 2.0.3 (string)

}

]

title : CISA ADP Vulnrichment (string)

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2024-08-15T15:18:21.699Z (string)

}

]

}

Show plain JSON

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2023-31339", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-08-15T15:18:02.945530Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-08-15T15:18:09.148Z"}}], "cna": {"source": {"advisory": "AMD-SB-1016", "discovery": "EXTERNAL"}, "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.8, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "LOW"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "AMD", "product": "Zynq\u2122 UltraScale+\u2122 MPSoC/RFSoC", "versions": [{"status": "affected", "version": "0", "lessThan": "2023.2", "versionType": "custom"}], "defaultStatus": "affected"}], "datePublic": "2024-08-13T04:00:00.000Z", "references": [{"url": "https://www.amd.com/en/resources/product-security/bulletin/amd-sb-8002", "tags": ["x_refsource_MISC"]}], "x_generator": {"engine": "Vulnogram 0.0.9"}, "descriptions": [{"lang": "en", "value": "Improper input validation in ARM\u00ae Trusted Firmware used in AMD\u2019s Zynq\u2122 UltraScale+\u2122) MPSoC/RFSoC may allow a privileged attacker to perform out of bound reads, potentially resulting in data leakage and denial of service.", "supportingMedia": [{"type": "text/html", "value": "<span style=\"background-color: rgb(255, 255, 255);\">\n\n<span style=\"background-color: rgb(255, 255, 255);\">Improper input validation in ARM\u00ae Trusted Firmware used in AMD\u2019s Zynq\u2122 UltraScale+\u2122) MPSoC/RFSoC may allow a privileged attacker to perform out of bound reads, potentially resulting in data leakage and denial of service.</span>\n\n</span>\n\n\n\n\n\n<br>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-20", "description": "CWE-20 Improper Input Validation"}]}], "providerMetadata": {"orgId": "b58fc414-a1e4-4f92-9d70-1add41838648", "shortName": "AMD", "dateUpdated": "2024-08-13T16:56:22.024Z"}, "x_legacyV4Record": {"source": {"advisory": "AMD-SB-1016", "discovery": "EXTERNAL"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"version": {"version_data": [{"version_name": "\u03bcProf Tool", "version_value": "3.4.494", "version_affected": "<"}]}, "product_name": "\u03bcProf Tool"}]}, "vendor_name": "AMD"}]}}, "data_type": "CVE", "generator": {"engine": "Vulnogram 0.0.9"}, "references": {"reference_data": [{"url": "https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1016", "name": "https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1016", "refsource": "MISC"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "eng", "value": "The AMDPowerProfiler.sys driver of AMD \u03bcProf tool may allow lower privileged users to access MSRs in kernel which may lead to privilege escalation and ring-0 code execution by the lower privileged user."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "CWE-284 Improper Access Control"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2021-26334", "STATE": "PUBLIC", "TITLE": "AMD Chipset Driver Information Disclosure Vulnerability", "ASSIGNER": "psirt@amd.com", "DATE_PUBLIC": "2021-11-09T20:30:00.000Z"}}}}, "cveMetadata": {"cveId": "CVE-2023-31339", "state": "PUBLISHED", "dateUpdated": "2024-08-15T15:18:21.699Z", "dateReserved": "2023-04-27T15:25:41.425Z", "assignerOrgId": "b58fc414-a1e4-4f92-9d70-1add41838648", "datePublished": "2024-08-13T16:56:22.024Z", "assignerShortName": "AMD"}, "dataVersion": "5.1"}

{

dataType : CVE_RECORD (string)

containers : { »

adp : [ »

0 : { »

title : CISA ADP Vulnrichment (string)

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

id : CVE-2023-31339 (string)

role : CISA Coordinator (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : partial (string)

}

]

version : 2.0.3 (string)

timestamp : 2024-08-15T15:18:02.945530Z (string)

}

]

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2024-08-15T15:18:09.148Z (string)

}

]

cna : { »

source : { »

advisory : AMD-SB-1016 (string)

discovery : EXTERNAL (string)

}

metrics : [ »

0 : { »

format : CVSS (string)

cvssV3_1 : { »

scope : UNCHANGED (string)

version : 3.1 (string)

baseScore : 4.8 (number)

attackVector : LOCAL (string)

baseSeverity : MEDIUM (string)

vectorString : CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:H (string)

integrityImpact : NONE (string)

userInteraction : REQUIRED (string)

attackComplexity : LOW (string)

availabilityImpact : HIGH (string)

privilegesRequired : HIGH (string)

confidentialityImpact : LOW (string)

}

scenarios : [ »

0 : { »

lang : en (string)

value : GENERAL (string)

}

]

}

]

affected : [ »

0 : { »

vendor : AMD (string)

product : Zynq™ UltraScale+™ MPSoC/RFSoC (string)

versions : [ »

0 : { »

status : affected (string)

version : 0 (string)

lessThan : 2023.2 (string)

versionType : custom (string)

}

]

defaultStatus : affected (string)

}

]

datePublic : 2024-08-13T04:00:00.000Z (string)

references : [ »

0 : { »

url : https://www.amd.com/en/resources/product-security/bulletin/amd-sb-8002 (string)

tags : [ »

0 : x_refsource_MISC (string)

]

}

]

x_generator : { »

engine : Vulnogram 0.0.9 (string)

}

descriptions : [ »

0 : { »

lang : en (string)

value : Improper input validation in ARM® Trusted Firmware used in AMD’s Zynq™ UltraScale+™) MPSoC/RFSoC may allow a privileged attacker to perform out of bound reads, potentially resulting in data leakage and denial of service. (string)

supportingMedia : [ »

0 : { »

type : text/html (string)

value : Improper input validation in ARM® Trusted Firmware used in AMD’s Zynq™ UltraScale+™) MPSoC/RFSoC may allow a privileged attacker to perform out of bound reads, potentially resulting in data leakage and denial of service. (string)

base64 : false (boolean)

}

]

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

lang : en (string)

type : CWE (string)

cweId : CWE-20 (string)

description : CWE-20 Improper Input Validation (string)

}

]

}

]

providerMetadata : { »

orgId : b58fc414-a1e4-4f92-9d70-1add41838648 (string)

shortName : AMD (string)

dateUpdated : 2024-08-13T16:56:22.024Z (string)

}

x_legacyV4Record : { »

source : { »

advisory : AMD-SB-1016 (string)

discovery : EXTERNAL (string)

}

affects : { »

vendor : { »

vendor_data : [ »

0 : { »

product : { »

product_data : [ »

0 : { »

version : { »

version_data : [ »

0 : { »

version_name : μProf Tool (string)

version_value : 3.4.494 (string)

version_affected : < (string)

}

]

}

product_name : μProf Tool (string)

}

]

}

vendor_name : AMD (string)

}

]

}

data_type : CVE (string)

generator : { »

engine : Vulnogram 0.0.9 (string)

}

references : { »

reference_data : [ »

0 : { »

url : https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1016 (string)

name : https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1016 (string)

refsource : MISC (string)

}

]

}

data_format : MITRE (string)

description : { »

description_data : [ »

0 : { »

lang : eng (string)

value : The AMDPowerProfiler.sys driver of AMD μProf tool may allow lower privileged users to access MSRs in kernel which may lead to privilege escalation and ring-0 code execution by the lower privileged user. (string)

}

]

}

problemtype : { »

problemtype_data : [ »

0 : { »

description : [ »

0 : { »

lang : eng (string)

value : CWE-284 Improper Access Control (string)

}

]

}

]

}

data_version : 4.0 (string)

CVE_data_meta : { »

ID : CVE-2021-26334 (string)

STATE : PUBLIC (string)

TITLE : AMD Chipset Driver Information Disclosure Vulnerability (string)

ASSIGNER : psirt@amd.com (string)

DATE_PUBLIC : 2021-11-09T20:30:00.000Z (string)

}

cveMetadata : { »

cveId : CVE-2023-31339 (string)

state : PUBLISHED (string)

dateUpdated : 2024-08-15T15:18:21.699Z (string)

dateReserved : 2023-04-27T15:25:41.425Z (string)

assignerOrgId : b58fc414-a1e4-4f92-9d70-1add41838648 (string)

datePublished : 2024-08-13T16:56:22.024Z (string)

assignerShortName : AMD (string)

}

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:amd:trusted_firmware-a:*:*:*:*:*:*:*:*", "matchCriteriaId": "585C3863-BBA7-4753-BEAF-58E8E192925D", "versionEndExcluding": "2023.2", "vulnerable": true}, {"criteria": "cpe:2.3:o:arm:trusted_firmware-a:*:*:*:*:*:*:*:*", "matchCriteriaId": "29263C2E-B0B7-461A-95B7-665202C84C1F", "versionEndExcluding": "2.10.1", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:amd:zu11eg:-:*:*:*:*:*:*:*", "matchCriteriaId": "CE5F3351-714B-4B2B-BE5B-C8FAF39800A7", "vulnerable": false}, {"criteria": "cpe:2.3:h:amd:zu15eg:-:*:*:*:*:*:*:*", "matchCriteriaId": "9045E0CA-4EF2-4486-906E-FF2A88915EA4", "vulnerable": false}, {"criteria": "cpe:2.3:h:amd:zu17eg:-:*:*:*:*:*:*:*", "matchCriteriaId": "3517639C-014E-4420-B220-DA274105EB36", "vulnerable": false}, {"criteria": "cpe:2.3:h:amd:zu19eg:-:*:*:*:*:*:*:*", "matchCriteriaId": "8FD519A4-6A95-4DE4-A60C-A045D4C18B39", "vulnerable": false}, {"criteria": "cpe:2.3:h:amd:zu1cg:-:*:*:*:*:*:*:*", "matchCriteriaId": "A3644759-DF73-4B08-A41F-F3545544A834", "vulnerable": false}, {"criteria": "cpe:2.3:h:amd:zu1eg:-:*:*:*:*:*:*:*", "matchCriteriaId": "D1F0F4E1-6614-4764-95C6-07021037C98E", "vulnerable": false}, {"criteria": "cpe:2.3:h:amd:zu21dr:-:*:*:*:*:*:*:*", "matchCriteriaId": "13C07809-E70A-4A43-A0BA-B9BE011DF95D", "vulnerable": false}, {"criteria": "cpe:2.3:h:amd:zu25dr:-:*:*:*:*:*:*:*", "matchCriteriaId": "E6FF4C27-6BB6-49E9-9739-0ACE9BDCC9C5", "vulnerable": false}, {"criteria": "cpe:2.3:h:amd:zu27dr:-:*:*:*:*:*:*:*", "matchCriteriaId": "F9EE10CC-D349-4E43-9418-49BEB0237AC8", "vulnerable": false}, {"criteria": "cpe:2.3:h:amd:zu28dr:-:*:*:*:*:*:*:*", "matchCriteriaId": "77F6F4A1-A50C-49D3-BF5C-A8F4EF0432EA", "vulnerable": false}, {"criteria": "cpe:2.3:h:amd:zu29dr:-:*:*:*:*:*:*:*", "matchCriteriaId": "4CDED669-6D4B-47BE-89B3-38762106CC15", "vulnerable": false}, {"criteria": "cpe:2.3:h:amd:zu2cg:-:*:*:*:*:*:*:*", "matchCriteriaId": "8AA3F682-6DF1-46F5-BF27-4DBD5C49912E", "vulnerable": false}, {"criteria": "cpe:2.3:h:amd:zu2eg:-:*:*:*:*:*:*:*", "matchCriteriaId": "BFAA3DD6-72A8-47EB-B4DA-623956136076", "vulnerable": false}, {"criteria": "cpe:2.3:h:amd:zu39dr:-:*:*:*:*:*:*:*", "matchCriteriaId": "C2C4AB9E-C10F-40E2-B7A7-6D98CA9C978D", "vulnerable": false}, {"criteria": "cpe:2.3:h:amd:zu3cg:-:*:*:*:*:*:*:*", "matchCriteriaId": "40A210AD-DFED-4DC0-B133-483967D67622", "vulnerable": false}, {"criteria": "cpe:2.3:h:amd:zu3eg:-:*:*:*:*:*:*:*", "matchCriteriaId": "25305088-1DDF-4E60-B7CD-9990D4D3E1B1", "vulnerable": false}, {"criteria": "cpe:2.3:h:amd:zu3tcg:-:*:*:*:*:*:*:*", "matchCriteriaId": "A331B606-2D5D-4EFD-909C-1E497363C490", "vulnerable": false}, {"criteria": "cpe:2.3:h:amd:zu3teg:-:*:*:*:*:*:*:*", "matchCriteriaId": "501B3C64-A6A2-433A-B6F1-9B54A1CE5A3A", "vulnerable": false}, {"criteria": "cpe:2.3:h:amd:zu42dr:-:*:*:*:*:*:*:*", "matchCriteriaId": "7539C6D1-451C-4D18-A405-8D1C0C558DEE", "vulnerable": false}, {"criteria": "cpe:2.3:h:amd:zu43dr:-:*:*:*:*:*:*:*", "matchCriteriaId": "786D2CC5-115F-47D1-BF7A-912A53A4CC15", "vulnerable": false}, {"criteria": "cpe:2.3:h:amd:zu46dr:-:*:*:*:*:*:*:*", "matchCriteriaId": "77A4DA65-5444-415C-98ED-58B8AEE5C9BF", "vulnerable": false}, {"criteria": "cpe:2.3:h:amd:zu47dr:-:*:*:*:*:*:*:*", "matchCriteriaId": "16EE74BE-140C-4E7E-A863-9241D46F0B28", "vulnerable": false}, {"criteria": "cpe:2.3:h:amd:zu48dr:-:*:*:*:*:*:*:*", "matchCriteriaId": "2EB69401-F8BB-4769-B873-B8004480DD03", "vulnerable": false}, {"criteria": "cpe:2.3:h:amd:zu49dr:-:*:*:*:*:*:*:*", "matchCriteriaId": "7ABEFC67-EF4C-4B67-8ED8-9A2EB1D87410", "vulnerable": false}, {"criteria": "cpe:2.3:h:amd:zu4cg:-:*:*:*:*:*:*:*", "matchCriteriaId": "E2905CDB-B546-4E21-A112-77C3C3163BFE", "vulnerable": false}, {"criteria": "cpe:2.3:h:amd:zu4eg:-:*:*:*:*:*:*:*", "matchCriteriaId": "90E53A37-6EF6-4C61-AD96-9E611677CE7F", "vulnerable": false}, {"criteria": "cpe:2.3:h:amd:zu4ev:-:*:*:*:*:*:*:*", "matchCriteriaId": "E31CE2F3-EA33-4F3E-BFDD-0E29E97D8EB6", "vulnerable": false}, {"criteria": "cpe:2.3:h:amd:zu5cg:-:*:*:*:*:*:*:*", "matchCriteriaId": "EBEB8E8A-95D7-4E79-BC4D-4085C5E800F7", "vulnerable": false}, {"criteria": "cpe:2.3:h:amd:zu5eg:-:*:*:*:*:*:*:*", "matchCriteriaId": "EA09364E-BC82-49F6-AE09-2DBE2D332B2E", "vulnerable": false}, {"criteria": "cpe:2.3:h:amd:zu5ev:-:*:*:*:*:*:*:*", "matchCriteriaId": "B0E1453D-9BAF-49D7-9362-B4D8CB886612", "vulnerable": false}, {"criteria": "cpe:2.3:h:amd:zu63dr:-:*:*:*:*:*:*:*", "matchCriteriaId": "DE17FB2B-C861-4980-A891-F9A15A5F7A42", "vulnerable": false}, {"criteria": "cpe:2.3:h:amd:zu64dr:-:*:*:*:*:*:*:*", "matchCriteriaId": "83A35E38-9A97-41C7-8404-CC3F29514527", "vulnerable": false}, {"criteria": "cpe:2.3:h:amd:zu65dr:-:*:*:*:*:*:*:*", "matchCriteriaId": "8AEDD34F-8FD2-4D1A-82E9-171E227246D9", "vulnerable": false}, {"criteria": "cpe:2.3:h:amd:zu67dr:-:*:*:*:*:*:*:*", "matchCriteriaId": "6B8E9AA5-35C3-4AA2-9F44-D60EB39A4FB4", "vulnerable": false}, {"criteria": "cpe:2.3:h:amd:zu6cg:-:*:*:*:*:*:*:*", "matchCriteriaId": "19B4BE70-7ECC-40D0-A770-6B414FF06A83", "vulnerable": false}, {"criteria": "cpe:2.3:h:amd:zu6eg:-:*:*:*:*:*:*:*", "matchCriteriaId": "8E63D5EA-563E-4C37-81A8-78517869BFA4", "vulnerable": false}, {"criteria": "cpe:2.3:h:amd:zu7cg:-:*:*:*:*:*:*:*", "matchCriteriaId": "D3DE9030-505E-422C-99D9-0B9894802D90", "vulnerable": false}, {"criteria": "cpe:2.3:h:amd:zu7eg:-:*:*:*:*:*:*:*", "matchCriteriaId": "FCCA05DE-0F83-4195-B95D-E855837EACCC", "vulnerable": false}, {"criteria": "cpe:2.3:h:amd:zu7ev:-:*:*:*:*:*:*:*", "matchCriteriaId": "BEFEE64D-9614-4706-935B-046147D0DFC9", "vulnerable": false}, {"criteria": "cpe:2.3:h:amd:zu9cg:-:*:*:*:*:*:*:*", "matchCriteriaId": "61BB42CE-A537-43E6-94D7-BED504BEA5B6", "vulnerable": false}, {"criteria": "cpe:2.3:h:amd:zu9eg:-:*:*:*:*:*:*:*", "matchCriteriaId": "23D4D75A-2704-4752-BD6C-28F7CEEF41AD", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Improper input validation in ARM\u00ae Trusted Firmware used in AMD\u2019s Zynq\u2122 UltraScale+\u2122) MPSoC/RFSoC may allow a privileged attacker to perform out of bound reads, potentially resulting in data leakage and denial of service."}, {"lang": "es", "value": "Una validaci\u00f3n de entrada incorrecta en el firmware de confianza ARM\u00ae utilizado en Zynq\u2122 UltraScale+\u2122) MPSoC/RFSoC de AMD puede permitir que un atacante privilegiado realice lecturas fuera de los l\u00edmites, lo que podr\u00eda provocar una fuga de datos y una denegaci\u00f3n de servicio."}], "id": "CVE-2023-31339", "lastModified": "2024-11-27T15:55:02.843", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 4.8, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 0.6, "impactScore": 4.2, "source": "psirt@amd.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.8, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 0.6, "impactScore": 5.2, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2024-08-13T17:15:20.870", "references": [{"source": "psirt@amd.com", "tags": ["Broken Link"], "url": "https://www.amd.com/en/resources/product-security/bulletin/amd-sb-8002"}], "sourceIdentifier": "psirt@amd.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-20"}], "source": "psirt@amd.com", "type": "Secondary"}, {"description": [{"lang": "en", "value": "CWE-125"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:amd:trusted_firmware-a:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 585C3863-BBA7-4753-BEAF-58E8E192925D (string)

versionEndExcluding : 2023.2 (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:o:arm:trusted_firmware-a:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 29263C2E-B0B7-461A-95B7-665202C84C1F (string)

versionEndExcluding : 2.10.1 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:amd:zu11eg:-:*:*:*:*:*:*:* (string)

matchCriteriaId : CE5F3351-714B-4B2B-BE5B-C8FAF39800A7 (string)

vulnerable : false (boolean)

}

1 : { »

criteria : cpe:2.3:h:amd:zu15eg:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 9045E0CA-4EF2-4486-906E-FF2A88915EA4 (string)

vulnerable : false (boolean)

}

2 : { »

criteria : cpe:2.3:h:amd:zu17eg:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 3517639C-014E-4420-B220-DA274105EB36 (string)

vulnerable : false (boolean)

}

3 : { »

criteria : cpe:2.3:h:amd:zu19eg:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 8FD519A4-6A95-4DE4-A60C-A045D4C18B39 (string)

vulnerable : false (boolean)

}

4 : { »

criteria : cpe:2.3:h:amd:zu1cg:-:*:*:*:*:*:*:* (string)

matchCriteriaId : A3644759-DF73-4B08-A41F-F3545544A834 (string)

vulnerable : false (boolean)

}

5 : { »

criteria : cpe:2.3:h:amd:zu1eg:-:*:*:*:*:*:*:* (string)

matchCriteriaId : D1F0F4E1-6614-4764-95C6-07021037C98E (string)

vulnerable : false (boolean)

}

6 : { »

criteria : cpe:2.3:h:amd:zu21dr:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 13C07809-E70A-4A43-A0BA-B9BE011DF95D (string)

vulnerable : false (boolean)

}

7 : { »

criteria : cpe:2.3:h:amd:zu25dr:-:*:*:*:*:*:*:* (string)

matchCriteriaId : E6FF4C27-6BB6-49E9-9739-0ACE9BDCC9C5 (string)

vulnerable : false (boolean)

}

8 : { »

criteria : cpe:2.3:h:amd:zu27dr:-:*:*:*:*:*:*:* (string)

matchCriteriaId : F9EE10CC-D349-4E43-9418-49BEB0237AC8 (string)

vulnerable : false (boolean)

}

9 : { »

criteria : cpe:2.3:h:amd:zu28dr:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 77F6F4A1-A50C-49D3-BF5C-A8F4EF0432EA (string)

vulnerable : false (boolean)

}

10 : { »

criteria : cpe:2.3:h:amd:zu29dr:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 4CDED669-6D4B-47BE-89B3-38762106CC15 (string)

vulnerable : false (boolean)

}

11 : { »

criteria : cpe:2.3:h:amd:zu2cg:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 8AA3F682-6DF1-46F5-BF27-4DBD5C49912E (string)

vulnerable : false (boolean)

}

12 : { »

criteria : cpe:2.3:h:amd:zu2eg:-:*:*:*:*:*:*:* (string)

matchCriteriaId : BFAA3DD6-72A8-47EB-B4DA-623956136076 (string)

vulnerable : false (boolean)

}

13 : { »

criteria : cpe:2.3:h:amd:zu39dr:-:*:*:*:*:*:*:* (string)

matchCriteriaId : C2C4AB9E-C10F-40E2-B7A7-6D98CA9C978D (string)

vulnerable : false (boolean)

}

14 : { »

criteria : cpe:2.3:h:amd:zu3cg:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 40A210AD-DFED-4DC0-B133-483967D67622 (string)

vulnerable : false (boolean)

}

15 : { »

criteria : cpe:2.3:h:amd:zu3eg:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 25305088-1DDF-4E60-B7CD-9990D4D3E1B1 (string)

vulnerable : false (boolean)

}

16 : { »

criteria : cpe:2.3:h:amd:zu3tcg:-:*:*:*:*:*:*:* (string)

matchCriteriaId : A331B606-2D5D-4EFD-909C-1E497363C490 (string)

vulnerable : false (boolean)

}

17 : { »

criteria : cpe:2.3:h:amd:zu3teg:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 501B3C64-A6A2-433A-B6F1-9B54A1CE5A3A (string)

vulnerable : false (boolean)

}

18 : { »

criteria : cpe:2.3:h:amd:zu42dr:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 7539C6D1-451C-4D18-A405-8D1C0C558DEE (string)

vulnerable : false (boolean)

}

19 : { »

criteria : cpe:2.3:h:amd:zu43dr:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 786D2CC5-115F-47D1-BF7A-912A53A4CC15 (string)

vulnerable : false (boolean)

}

20 : { »

criteria : cpe:2.3:h:amd:zu46dr:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 77A4DA65-5444-415C-98ED-58B8AEE5C9BF (string)

vulnerable : false (boolean)

}

21 : { »

criteria : cpe:2.3:h:amd:zu47dr:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 16EE74BE-140C-4E7E-A863-9241D46F0B28 (string)

vulnerable : false (boolean)

}

22 : { »

criteria : cpe:2.3:h:amd:zu48dr:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 2EB69401-F8BB-4769-B873-B8004480DD03 (string)

vulnerable : false (boolean)

}

23 : { »

criteria : cpe:2.3:h:amd:zu49dr:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 7ABEFC67-EF4C-4B67-8ED8-9A2EB1D87410 (string)

vulnerable : false (boolean)

}

24 : { »

criteria : cpe:2.3:h:amd:zu4cg:-:*:*:*:*:*:*:* (string)

matchCriteriaId : E2905CDB-B546-4E21-A112-77C3C3163BFE (string)

vulnerable : false (boolean)

}

25 : { »

criteria : cpe:2.3:h:amd:zu4eg:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 90E53A37-6EF6-4C61-AD96-9E611677CE7F (string)

vulnerable : false (boolean)

}

26 : { »

criteria : cpe:2.3:h:amd:zu4ev:-:*:*:*:*:*:*:* (string)

matchCriteriaId : E31CE2F3-EA33-4F3E-BFDD-0E29E97D8EB6 (string)

vulnerable : false (boolean)

}

27 : { »

criteria : cpe:2.3:h:amd:zu5cg:-:*:*:*:*:*:*:* (string)

matchCriteriaId : EBEB8E8A-95D7-4E79-BC4D-4085C5E800F7 (string)

vulnerable : false (boolean)

}

28 : { »

criteria : cpe:2.3:h:amd:zu5eg:-:*:*:*:*:*:*:* (string)

matchCriteriaId : EA09364E-BC82-49F6-AE09-2DBE2D332B2E (string)

vulnerable : false (boolean)

}

29 : { »

criteria : cpe:2.3:h:amd:zu5ev:-:*:*:*:*:*:*:* (string)

matchCriteriaId : B0E1453D-9BAF-49D7-9362-B4D8CB886612 (string)

vulnerable : false (boolean)

}

30 : { »

criteria : cpe:2.3:h:amd:zu63dr:-:*:*:*:*:*:*:* (string)

matchCriteriaId : DE17FB2B-C861-4980-A891-F9A15A5F7A42 (string)

vulnerable : false (boolean)

}

31 : { »

criteria : cpe:2.3:h:amd:zu64dr:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 83A35E38-9A97-41C7-8404-CC3F29514527 (string)

vulnerable : false (boolean)

}

32 : { »

criteria : cpe:2.3:h:amd:zu65dr:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 8AEDD34F-8FD2-4D1A-82E9-171E227246D9 (string)

vulnerable : false (boolean)

}

33 : { »

criteria : cpe:2.3:h:amd:zu67dr:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 6B8E9AA5-35C3-4AA2-9F44-D60EB39A4FB4 (string)

vulnerable : false (boolean)

}

34 : { »

criteria : cpe:2.3:h:amd:zu6cg:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 19B4BE70-7ECC-40D0-A770-6B414FF06A83 (string)

vulnerable : false (boolean)

}

35 : { »

criteria : cpe:2.3:h:amd:zu6eg:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 8E63D5EA-563E-4C37-81A8-78517869BFA4 (string)

vulnerable : false (boolean)

}

36 : { »

criteria : cpe:2.3:h:amd:zu7cg:-:*:*:*:*:*:*:* (string)

matchCriteriaId : D3DE9030-505E-422C-99D9-0B9894802D90 (string)

vulnerable : false (boolean)

}

37 : { »

criteria : cpe:2.3:h:amd:zu7eg:-:*:*:*:*:*:*:* (string)

matchCriteriaId : FCCA05DE-0F83-4195-B95D-E855837EACCC (string)

vulnerable : false (boolean)

}

38 : { »

criteria : cpe:2.3:h:amd:zu7ev:-:*:*:*:*:*:*:* (string)

matchCriteriaId : BEFEE64D-9614-4706-935B-046147D0DFC9 (string)

vulnerable : false (boolean)

}

39 : { »

criteria : cpe:2.3:h:amd:zu9cg:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 61BB42CE-A537-43E6-94D7-BED504BEA5B6 (string)

vulnerable : false (boolean)

}

40 : { »

criteria : cpe:2.3:h:amd:zu9eg:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 23D4D75A-2704-4752-BD6C-28F7CEEF41AD (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

]

cveTags : [ *empty* ]

descriptions : [ »

0 : { »

lang : en (string)

value : Improper input validation in ARM® Trusted Firmware used in AMD’s Zynq™ UltraScale+™) MPSoC/RFSoC may allow a privileged attacker to perform out of bound reads, potentially resulting in data leakage and denial of service. (string)

}

1 : { »

lang : es (string)

value : Una validación de entrada incorrecta en el firmware de confianza ARM® utilizado en Zynq™ UltraScale+™) MPSoC/RFSoC de AMD puede permitir que un atacante privilegiado realice lecturas fuera de los límites, lo que podría provocar una fuga de datos y una denegación de servicio. (string)

}

]

id : CVE-2023-31339 (string)

lastModified : 2024-11-27T15:55:02.843 (string)

metrics : { »

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : LOCAL (string)

availabilityImpact : HIGH (string)

baseScore : 4.8 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : LOW (string)

integrityImpact : NONE (string)

privilegesRequired : HIGH (string)

scope : UNCHANGED (string)

userInteraction : REQUIRED (string)

vectorString : CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:H (string)

version : 3.1 (string)

}

exploitabilityScore : 0.6 (number)

impactScore : 4.2 (number)

source : psirt@amd.com (string)

type : Secondary (string)

}

1 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : LOCAL (string)

availabilityImpact : HIGH (string)

baseScore : 5.8 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : HIGH (string)

integrityImpact : NONE (string)

privilegesRequired : HIGH (string)

scope : UNCHANGED (string)

userInteraction : REQUIRED (string)

vectorString : CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:H (string)

version : 3.1 (string)

}

exploitabilityScore : 0.6 (number)

impactScore : 5.2 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

published : 2024-08-13T17:15:20.870 (string)

references : [ »

0 : { »

source : psirt@amd.com (string)

tags : [ »

0 : Broken Link (string)

]

url : https://www.amd.com/en/resources/product-security/bulletin/amd-sb-8002 (string)

}

]

sourceIdentifier : psirt@amd.com (string)

vulnStatus : Analyzed (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-20 (string)

}

]

source : psirt@amd.com (string)

type : Secondary (string)

}

1 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-125 (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Metrics

Attack Vector Local

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact Low

Integrity Impact None

Availability Impact High

User Interaction Required

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

Metrics

Attack Vector Local

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact Low

Integrity Impact None

Availability Impact High

User Interaction Required

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object