Vulnerability · Published Nov 14, 2023 · Assigned by AMD
CVE-2022-23830
Low 1.9
In plain English
A low-severity security flaw in 3rd Gen AMD EPYC™ Processors from AMD. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 29% of all known vulnerabilities).
Severity (CVSS 3.1)1.9Low
Exploit odds (30 days)0.3%top 71.5% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
SMM configuration may not be immutable, as intended, when SNP is enabled resulting in a potential limited loss of guest memory integrity.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| AMD | 3rd Gen AMD EPYC™ Processors | various |
| AMD | 4th Gen AMD EPY™ Processors | various |
| AMD | AMD EPYC™ Embedded 7003 | various |