Vulnerability · Published Nov 14, 2023 · Assigned by AMD
CVE-2023-20533
Medium 6.1
In plain English
A medium-severity security flaw in 2nd Gen AMD EPYC™ Processors from AMD. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 43% of all known vulnerabilities).
Severity (CVSS 3.1)6.1Medium
Exploit odds (30 days)0.5%top 57.0% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
Insufficient DRAM address validation in System Management Unit (SMU) may allow an attacker to read/write from/to an invalid DRAM address, potentially resulting in denial-of-service.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| AMD | Ryzen™ 3000 series Desktop Processors “Matisse" | various |
| AMD | AMD Ryzen™ 5000 Series Desktop Processors “Vermeer” | various |
| AMD | AMD Ryzen™ Threadripper™ 3000 Series Processors “Castle Peak” HEDT | various |
| AMD | AMD Ryzen™ Threadripper™ PRO Processors “Castle Peak” WS SP3 | various |
| AMD | AMD Ryzen™ Threadripper™ PRO 3000WX Series Processors “Chagall” WS | various |
| AMD | 2nd Gen AMD EPYC™ Processors | various |
| AMD | 3rd Gen AMD EPYC™ Processors | various |
| AMD | AMD EPYC™ Embedded 7002 | various |
| AMD | AMD EPYC™ Embedded 7003 | various |
| AMD | AMD Ryzen™ Embedded 5000 | various |
| AMD | AMD EPYC™ Embedded 7002 | various |
| AMD | AMD EPYC™ Embedded 7003 | various |