by Kastro
Paper/Archive/CVE-2023-20591

CVE-2023-20591

AMD AMD EPYC™ 7003 Series Processors — Improper re-initialization of IOMMU during the DRTM event may permit an untrusted platform configuration to persist, allowing an attacker…

EPSS 0.3%CVSS 10.0
critical.is priorityof 100
35
CVSS 10.0 (NVD)10.0 / 10 × 3030.0Not in CISA KEV+300.0EPSS percentile 22.7.227 × 204.5No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Improper re-initialization of IOMMU during the DRTM event may permit an untrusted platform configuration to persist, allowing an attacker to read or modify hypervisor memory, potentially resulting in loss of confidentiality, integrity, and availability.

Affected

ProductAffectedFixed inSource
AMD EPYC™ 7003 Series Processorssee advisoryMilanPI 1.0.0.BCNA
AMD EPYC™ 9004 Series Processorssee advisoryGenoa 1.0.0.8CNA
AMD EPYC™ Embedded 7003 Series Processorssee advisoryEmbMilanPI-SP3 1.0.0.7CNA
AMD EPYC™ Embedded 9003 Series Processorssee advisoryEmbGenoaPI-SP5 1.0.0.3CNA
epyc_7003_firmware< milanpi_1.0.0.bmilanpi_1.0.0.bCISA-ADP
epyc_9003_firmware< genoapi_1.0.0.8genoapi_1.0.0.8CISA-ADP
epyc_7773x_firmware< milanpi_1.0.0.bmilanpi_1.0.0.bCISA-ADP
epyc_9754s_firmware< genoapi_1.0.0.8genoapi_1.0.0.8CISA-ADP

Scores by source

NVD10.0CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
AMD (CNA)6.5CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: partial

References

advisoryamd.com/en/resources/product-security/bulletin/amd-sb-3003.html