CVE-2023-20562 is a high-severity vulnerability in AMD uProf, affecting both Windows and Linux systems. It stems from insufficient validation of IOCTL input buffers, allowing an authenticated user to load an unsigned driver. This could lead to arbitrary kernel execution, granting an attacker full control over the compromised system. The vulnerability has a CVSS score of 7.8 (High), indicating a local attack vector with low complexity, requiring low privileges, and having high impacts on confidentiality, integrity, and availability. Despite its severity, there is currently no evidence of active exploitation, nor is public exploit code available on platforms like Metasploit or ExploitDB. The vulnerability has also received minimal community discussion and media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 4.1.396CPE matchmatch criteria | cpe:2.3:a:amd:amd_uprof:*:*:*:*:*:*:*:* | ||
< 4.1-424CPE matchmatch criteria | cpe:2.3:a:amd:amd_uprof:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.