CVE-2023-20589

fTPM Voltage Fault Injection

published August 8, 2023

CVSS
—
EPSS
1%
Percentile
47.2
In the wild
Unconfirmed
What it is

An attacker with specialized hardware and physical access to an impacted device may be able to perform a voltage fault injection attack resulting in compromise of the ASP secure boot potentially leading to arbitrary code execution.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00584 · 47.2th percentile
Published
2023-08-08T17:04Z
EPSS history
Timeline
  • 08 AUG 17:04Z
    fTPM Voltage Fault Injection
    cvelistv5