PT-2025-6396 · Unknown · Drtm Firmware

Published 2025-02-11 · Updated 2025-02-12 · CVE-2023-31331

Positive Technologies (AI Summary)

CVSS v3.1

3.0

Low

Base vector

AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:L

Name of the Vulnerable Software and Affected Versions DRTM firmware (affected versions not specified)

Description The issue is related to improper access control in the firmware, which could allow a privileged attacker to perform multiple driver initializations. This could result in stack memory corruption, potentially leading to loss of integrity or availability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-1284

Related Identifiers

CVE-2023-31331

Affected Products

Drtm Firmware

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2023-31331 · Security Note
• https://twitter.com/CVEnew/status/1889437667907260817 · Twitter Post
• https://amd.com/en/resources/product-security/bulletin/amd-sb-5004.html · Note
• https://amd.com/en/resources/product-security/bulletin/amd-sb-4008.html · Note
• https://t.me/cvedetector/17791 · Telegram Post