CyberBrief
Subscribe
6.0Medium

Amd Ryzen 7 5700g Firmware

CVE-2023-20579

Improper Access Control in the AMD SPI protection feature may allow a user with Ring0 (kernel mode) privileged access to bypass protections potentially resulting in loss of integrity and availability.

What this means for your business

  • It affects Amd Ryzen 7 5700g Firmware. It matters if your company, or a supplier that handles your data, runs it.
  • An attacker can use it only with access to the machine itself, with an administrator login, and without anyone at your company clicking anything.

What to do

  1. 1Check whether your company or your suppliers run Amd Ryzen 7 5700g Firmware, and which version. The affected versions are listed further down this page.
  2. 2If you do, apply the vendor's fix. A patch or vendor advisory has been published.

Not sure if your company is exposed?

Fastnexa’s certified penetration testers can check whether attackers could use this flaw, or others like it, against your websites, apps and network. The full test is free for our first 10 founding clients until 31 December 2026.

Check if you’re exposedBook a call

Scoring

CVSS
6.0 (v3.1)
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H
Weakness
CWE-284
Assigned by
psirt@amd.com

Dates

Published
2024-02-13
Last modified
2026-09-02
Sources
NVD

Affected products

  • Amd Ryzen 7 5700g Firmware- comboam4v2pi_1.2.0.c
  • Amd Ryzen 7 5700gall versions
  • Amd Ryzen 7 5700ge Firmware- comboam4v2pi_1.2.0.c
  • Amd Ryzen 7 5700geall versions
  • Amd Ryzen 5 5600g Firmware- comboam4v2pi_1.2.0.c
  • Amd Ryzen 5 5600gall versions
  • Amd Ryzen 5 5600gt Firmware- comboam4v2pi_1.2.0.c
  • Amd Ryzen 5 5600gtall versions
  • Amd Ryzen 5 5600ge Firmware- comboam4v2pi_1.2.0.c
  • Amd Ryzen 5 5600geall versions
  • Amd Ryzen 5 5500gt Firmware- comboam4v2pi_1.2.0.c
  • Amd Ryzen 5 5500gtall versions

As listed in the NVD configuration data. Not a statement about your estate.

References