VULNERABILITY INTELLIGENCE

CVE-2023-20572

EPSS probability0.15%
CISA KEVNot currently listed
Published2026-06-26
Last modified2026-06-26

Description

An observable timing discrepancy in the ASP could allow a privileged attacker to perform a brute-force attack against the hash message authentication code, allowing the input of an arbitrary message, potentially leading to a loss of data integrity.

Weakness classification

  • psirt@amd.com: CWE-208

Primary references