CVE-2020-12928 Privilege escalation in AMD Ryzen Master
An authenticated user can escalate privileges to NT authority system via a vulnerability in a dynamically loaded AMD driver.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2020-12928?
CVE-2020-12928 is a high-severity vulnerability in AMD Ryzen Master, published on 13 Oct 2020. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
A vulnerability in a dynamically loaded AMD driver in AMD Ryzen Master V15 may allow any authenticated user to escalate privileges to NT authority system.
Weakness: CWE-749
Which versions are affected by CVE-2020-12928?
It affects 1 product.
Products include Amd Ryzen Master.
How do I fix CVE-2020-12928?
No fix has been published for CVE-2020-12928 yet. Limit exposure of the affected software until one is available.
Is CVE-2020-12928 being exploited?
There is no known exploitation of CVE-2020-12928 in the wild and no public exploit code.
Public exploit code: 2 proofs of concept on GitHub.
Other vulnerabilities in AMD Ryzen Master
Sources
Also known as GHSA-wqqq-qjq3-pg36.