CVE-2023-20572

No fix known EPSS <1%CVSS 5.6

An observable timing discrepancy in the ASP could allow a privileged attacker to perform a brute-force attack against the hash message authentication code, allowing the input of an arbitrary message, potentially leading to a loss of data integrity.

Published 2026-06-26 · CVE record · OSV

Products: AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics, AMD Ryzen™ 7030 Series Mobile processors with Radeon™ Graphics, AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics, AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics, AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics, AMD Ryzen™ 5000 Series Desktop Processors, AMD Ryzen™ 3000 Series Desktop Processors, AMD Ryzen™ 4000 Series Desktop Processors, AMD Ryzen™ 8000 Series Desktop Processors, AMD Ryzen™ 7000 Series Desktop Processors, AMD Ryzen™ Threadripper™ 3000 Series Processors, AMD Ryzen™ Threadripper™ PRO 3000WX Series Processors, AMD Ryzen™ Threadripper™ PRO 5000 WX-Series Processors, AMD Ryzen™ Threadripper™ 7000 Processors, AMD Ryzen™ Threadripper™ PRO 7000WX-Series Processors