Vulnerability · Published Aug 13, 2024 · Assigned by AMD
CVE-2023-20591
Medium 6.5
In plain English
A medium-severity security flaw in AMD EPYC™ 7003 Series Processors from AMD. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 23% of all known vulnerabilities).
Severity (CVSS 3.1)6.5Medium
Exploit odds (30 days)0.3%top 77.2% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Improper re-initialization of IOMMU during the DRTM event may permit an untrusted platform configuration to persist, allowing an attacker to read or modify hypervisor memory, potentially resulting in loss of confidentiality, integrity, and availability.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| AMD | AMD EPYC™ 7003 Series Processors | see references |
| AMD | AMD EPYC™ 9004 Series Processors | see references |
| AMD | AMD EPYC™ Embedded 7003 Series Processors | see references |
| AMD | AMD EPYC™ Embedded 9003 Series Processors | see references |
Weakness: CWE-665 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L