U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

National Vulnerability Database

National Vulnerability Database

NVD

National Vulnerability Database

Vulnerability Change Records for CVE-2023-20572

Change History

New CVE Received from Advanced Micro Devices Inc. 6/26/2026 12:16:28 PM

Action Type Old Value New Value
Added Description 

                  
                
              		

              
                
                  
                  
                    
An observable timing discrepancy in the ASP could allow a privileged attacker to perform a brute-force attack against the hash message authentication code, allowing the input of an arbitrary message, potentially leading to a loss of data integrity.

                  
                
              		
            

            

              Added
              CVSS V4.0

              
                
                  
                  
                    

                  
                
              		

              
                
                  
                  
                    
AV:L/AC:H/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

                  
                
              		
            

            

              Added
              CWE

              
                
                  
                  
                    

                  
                
              		

              
                
                  
                  
                    
CWE-208

                  
                
              		
            

            

              Added
              Reference

              
                
                  
                  
                    

                  
                
              		

              
                
                  
                  
                    
https://www.amd.com/en/resources/product-security/bulletin/amd-sb-4012.html

                  
                
              		
            

            

              Added
              Affected

              
                
                  
                  
                    

                  
                
              		

              
                
                  
                  
                    
[{"vendor":"AMD","product":"AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics","defaultStatus":"affected","versions":[{"version":"Picasso-FP5  1.0.1.1","status":"unaffected"}]},{"vendor":"AMD","product":"AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics","defaultStatus":"affected","versions":[{"version":"Pollock-FT5  1.0.0.7","status":"unaffected"}]},{"vendor":"AMD","product":"AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics","defaultStatus":"affected","versions":[{"version":"Cezanne-FP6  1.0.1.0","status":"unaffected"}]},{"vendor":"AMD","product":"AMD Ryzen™ 7030 Series Mobile processors with Radeon™ Graphics","defaultStatus":"affected","versions":[{"version":"Cezanne-FP6  1.0.1.0","status":"unaffected"}]},{"vendor":"AMD","product":"AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics","defaultStatus":"affected","versions":[{"version":"Renoir-FP6  1.0.0.D","status":"unaffected"}]},{"vendor":"AMD","product":"AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics","defaultStatus":"affected","versions":[{"version":"Rembrandt-FP7  1.0.0.A","status":"unaffected"}]},{"vendor":"AMD","product":"AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics","defaultStatus":"affected","versions":[{"version":"MendocinoPI-FT6  1.0.0.6","status":"unaffected"}]},{"vendor":"AMD","product":"AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics","defaultStatus":"affected","versions":[{"version":"ComboAM4v2PI  1.2.0.CA","status":"unaffected"}]},{"vendor":"AMD","product":"AMD Ryzen™ 5000 Series Desktop Processors","defaultStatus":"affected","versions":[{"version":"ComboAM4v2PI  1.2.0.CA","status":"unaffected"}]},{"vendor":"AMD","product":"AMD Ryzen™ 3000 Series Desktop Processors","defaultStatus":"affected","versions":[{"version":"ComboAM4v2PI  1.2.0.CA","status":"unaffected"},{"version":"ComboAM4PI  1.0.0.F","status":"unaffected"}]},{"vendor":"AMD","product":"AMD Ryzen™ 4000 Series Desktop Processors","defaultStatus":"affected","versions":[{"version":"ComboAM4v2PI  1.2.0.CA","status":"unaffected"}]},{"vendor":"AMD","product":"AMD Ryzen™ 5000 Series Desktop Processors","defaultStatus":"affected","versions":[{"version":"ComboAM4v2PI  1.2.0.CA","status":"unaffected"}]},{"vendor":"AMD","product":"AMD Ryzen™ 8000 Series Desktop Processors","defaultStatus":"affected","versions":[{"version":"ComboAM5  1.0.0.7a","status":"unaffected"}]},{"vendor":"AMD","product":"AMD Ryzen™ 7000 Series Desktop Processors","defaultStatus":"affected","versions":[{"version":"ComboAM5  1.0.0.7a","status":"unaffected"}]},{"vendor":"AMD","product":"AMD Ryzen™ Threadripper™ 3000 Series Processors","defaultStatus":"affected","versions":[{"version":"CastlePeakPI-SP3r3  1.0.0.C","status":"unaffected"}]},{"vendor":"AMD","product":"AMD Ryzen™ Threadripper™ PRO 3000WX Series Processors","defaultStatus":"affected","versions":[{"version":"CastlePeakWSPI-sWRX8  1.0.0.E","status":"unaffected"}]},{"vendor":"AMD","product":"AMD Ryzen™ Threadripper™ PRO 5000 WX-Series Processors","defaultStatus":"affected","versions":[{"version":"ChagallWSPI-sWRX8  1.0.0.9","status":"unaffected"}]},{"vendor":"AMD","product":"AMD Ryzen™ Threadripper™ 7000 Processors","defaultStatus":"affected","versions":[{"version":"StormPeakPI-SP6  1.1.0.0c","status":"unaffected"}]},{"vendor":"AMD","product":"AMD Ryzen™ Threadripper™ PRO 7000WX-Series Processors","defaultStatus":"affected","versions":[{"version":"StormPeakPI-SP6  1.0.0.1e","status":"unaffected"}]}]