AMD Ryzen processors find major data theft vulnerability

AMD has confirmed information about a vulnerability with which hackers could copy data from PCs based on Ryzen processors of all generations. In addition, users of assemblies based on other "red" chips could also become victims of cybercriminals, whose owners are advised to promptly download a new driver with a security patch.

Information about the problem with the vendor was shared by an IT specialist and co-founder of ZeroPeril Kyriakos Economou. To verify the discovered vulnerability, he downloaded several gigabytes of data from personal computers running on AMD processors.

The expert noted that he did not have administrator rights on the "experimental" PCs - to carry out a test attack, he used a workaround to access individual sections of the amdsps.sys driver, which is used by the platform security processor (PSP). A similar tactic was previously used by the acclaimed Meltdown and Specter exploits for Intel chips.

The vulnerability was originally discovered in the Ryzen 2000 and 3000 series processors, but as it turned out later, other branded CPUs, including the Ryzen 1000/4000/5000, Athlon and Threadripper, were also affected. The vulnerability has now been fixed - the company has released AMD PSP driver version 5.17.0.0, which fixes the problem. AMD strongly recommends installing it to all owners of PCs with "red" CPUs via Windows Update or a proprietary utility.

About Steven Perry

This is a short description in the author block about the author. You edit it by entering text in the "Biographical Info" field in the user admin panel.

0 Comments:

Post a Comment

Your comment and facebook share will be appreciated