AMD AMD EPYCâ„¢ 7003 Series Processors
En bref
- Source
- NVD
- EPSS
- EPSS 0.30 % · centile 23 ()
- État
- PUBLISHED
- Publiée
- Mise à jour
- Attribuée par
- AMD
- Statut NVD
- Modified
Description
Improper re-initialization of IOMMU during the DRTM event may permit an untrusted platform configuration to persist, allowing an attacker to read or modify hypervisor memory, potentially resulting in loss of confidentiality, integrity, and availability.
Faiblesses (CWE)
- CWE-665 — Initialisation incorrecte
Références
Scores
| Version | Score | Vecteur | Évalué par |
|---|---|---|---|
| CVSS 3.1 | MEDIUM 6.5 | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L | AMD |
| CVSS 3.1 | MEDIUM 6.5 | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L | NVD · psirt@amd.com (Secondary) |
| CVSS 3.1 | CRITICAL 10.0 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H | NVD · nvd@nist.gov (Primary) |
Références européennes
- ENISA EUVD · EUVD-2023-24770
- GCVE · GCVE-0-2023-20591
Configurations affectées (CPE NVD)
cpe:2.3:o:amd:epyc_8024pn_firmware:*:*:*:*:*:*:*:*< genoapi_1.0.0.8cpe:2.3:o:amd:epyc_8024p_firmware:*:*:*:*:*:*:*:*< genoapi_1.0.0.8cpe:2.3:o:amd:epyc_8124pn_firmware:*:*:*:*:*:*:*:*< genoapi_1.0.0.8cpe:2.3:o:amd:epyc_8124p_firmware:*:*:*:*:*:*:*:*< genoapi_1.0.0.8cpe:2.3:o:amd:epyc_8224pn_firmware:*:*:*:*:*:*:*:*< genoapi_1.0.0.8cpe:2.3:o:amd:epyc_8224p_firmware:*:*:*:*:*:*:*:*< genoapi_1.0.0.8cpe:2.3:o:amd:epyc_8324pn_firmware:*:*:*:*:*:*:*:*< genoapi_1.0.0.8cpe:2.3:o:amd:epyc_8324p_firmware:*:*:*:*:*:*:*:*< genoapi_1.0.0.8cpe:2.3:o:amd:epyc_8434pn_firmware:*:*:*:*:*:*:*:*< genoapi_1.0.0.8cpe:2.3:o:amd:epyc_8434p_firmware:*:*:*:*:*:*:*:*< genoapi_1.0.0.8cpe:2.3:o:amd:epyc_8534pn_firmware:*:*:*:*:*:*:*:*< genoapi_1.0.0.8cpe:2.3:o:amd:epyc_8534p_firmware:*:*:*:*:*:*:*:*< genoapi_1.0.0.8cpe:2.3:o:amd:epyc_9734_firmware:*:*:*:*:*:*:*:*< genoapi_1.0.0.8cpe:2.3:o:amd:epyc_9754s_firmware:*:*:*:*:*:*:*:*< genoapi_1.0.0.8cpe:2.3:o:amd:epyc_9754_firmware:*:*:*:*:*:*:*:*< genoapi_1.0.0.8cpe:2.3:o:amd:epyc_9184x_firmware:*:*:*:*:*:*:*:*< genoapi_1.0.0.8cpe:2.3:o:amd:epyc_9384x_firmware:*:*:*:*:*:*:*:*< genoapi_1.0.0.8cpe:2.3:o:amd:epyc_9684x_firmware:*:*:*:*:*:*:*:*< genoapi_1.0.0.8cpe:2.3:o:amd:epyc_9124_firmware:*:*:*:*:*:*:*:*< genoapi_1.0.0.8cpe:2.3:o:amd:epyc_9174f_firmware:*:*:*:*:*:*:*:*< genoapi_1.0.0.8cpe:2.3:o:amd:epyc_9224_firmware:*:*:*:*:*:*:*:*< genoapi_1.0.0.8cpe:2.3:o:amd:epyc_9254_firmware:*:*:*:*:*:*:*:*< genoapi_1.0.0.8cpe:2.3:o:amd:epyc_9274f_firmware:*:*:*:*:*:*:*:*< genoapi_1.0.0.8cpe:2.3:o:amd:epyc_9334_firmware:*:*:*:*:*:*:*:*< genoapi_1.0.0.8cpe:2.3:o:amd:epyc_9354_firmware:*:*:*:*:*:*:*:*< genoapi_1.0.0.8cpe:2.3:o:amd:epyc_9354p_firmware:*:*:*:*:*:*:*:*< genoapi_1.0.0.8cpe:2.3:o:amd:epyc_9374f_firmware:*:*:*:*:*:*:*:*< genoapi_1.0.0.8cpe:2.3:o:amd:epyc_9454_firmware:*:*:*:*:*:*:*:*< genoapi_1.0.0.8cpe:2.3:o:amd:epyc_9454p_firmware:*:*:*:*:*:*:*:*< genoapi_1.0.0.8cpe:2.3:o:amd:epyc_9474f_firmware:*:*:*:*:*:*:*:*< genoapi_1.0.0.8cpe:2.3:o:amd:epyc_9534_firmware:*:*:*:*:*:*:*:*< genoapi_1.0.0.8cpe:2.3:o:amd:epyc_9554_firmware:*:*:*:*:*:*:*:*< genoapi_1.0.0.8cpe:2.3:o:amd:epyc_9554p_firmware:*:*:*:*:*:*:*:*< genoapi_1.0.0.8cpe:2.3:o:amd:epyc_9634_firmware:*:*:*:*:*:*:*:*< genoapi_1.0.0.8cpe:2.3:o:amd:epyc_9654_firmware:*:*:*:*:*:*:*:*< genoapi_1.0.0.8cpe:2.3:o:amd:epyc_9654p_firmware:*:*:*:*:*:*:*:*< genoapi_1.0.0.8cpe:2.3:o:amd:epyc_7203_firmware:*:*:*:*:*:*:*:*< milanpi_1.0.0.bcpe:2.3:o:amd:epyc_7203p_firmware:*:*:*:*:*:*:*:*< milanpi_1.0.0.bcpe:2.3:o:amd:epyc_72f3_firmware:*:*:*:*:*:*:*:*< milanpi_1.0.0.bcpe:2.3:o:amd:epyc_7303_firmware:*:*:*:*:*:*:*:*< milanpi_1.0.0.b- +25 autres
Produits affectés
| Produit | Versions |
|---|---|
| AMD · AMD EPYC™ 7003 Series Processors | unaffected MilanPI 1.0.0.B |
| AMD · AMD EPYC™ 9004 Series Processors | unaffected Genoa 1.0.0.8 |
| AMD · AMD EPYC™ Embedded 7003 Series Processors | unaffected EmbMilanPI-SP3 1.0.0.7 |
| AMD · AMD EPYC™ Embedded 9003 Series Processors | unaffected EmbGenoaPI-SP5 1.0.0.3 |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |