AMD AMD EPYCâ„¢ 7003 Series Processors
At a glance
- Source
- NVD
- EPSS
- EPSS 0.30 % · percentile 23 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- AMD
- NVD status
- Modified
Description
Improper re-initialization of IOMMU during the DRTM event may permit an untrusted platform configuration to persist, allowing an attacker to read or modify hypervisor memory, potentially resulting in loss of confidentiality, integrity, and availability.
Weaknesses (CWE)
- CWE-665 — Improper Initialization
References
Scores
| Version | Score | Vector | Scored by |
|---|---|---|---|
| CVSS 3.1 | MEDIUM 6.5 | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L | AMD |
| CVSS 3.1 | MEDIUM 6.5 | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L | NVD · psirt@amd.com (Secondary) |
| CVSS 3.1 | CRITICAL 10.0 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H | NVD · nvd@nist.gov (Primary) |
European references
- ENISA EUVD · EUVD-2023-24770
- GCVE · GCVE-0-2023-20591
Affected configurations (NVD CPE)
cpe:2.3:o:amd:epyc_8024pn_firmware:*:*:*:*:*:*:*:*< genoapi_1.0.0.8cpe:2.3:o:amd:epyc_8024p_firmware:*:*:*:*:*:*:*:*< genoapi_1.0.0.8cpe:2.3:o:amd:epyc_8124pn_firmware:*:*:*:*:*:*:*:*< genoapi_1.0.0.8cpe:2.3:o:amd:epyc_8124p_firmware:*:*:*:*:*:*:*:*< genoapi_1.0.0.8cpe:2.3:o:amd:epyc_8224pn_firmware:*:*:*:*:*:*:*:*< genoapi_1.0.0.8cpe:2.3:o:amd:epyc_8224p_firmware:*:*:*:*:*:*:*:*< genoapi_1.0.0.8cpe:2.3:o:amd:epyc_8324pn_firmware:*:*:*:*:*:*:*:*< genoapi_1.0.0.8cpe:2.3:o:amd:epyc_8324p_firmware:*:*:*:*:*:*:*:*< genoapi_1.0.0.8cpe:2.3:o:amd:epyc_8434pn_firmware:*:*:*:*:*:*:*:*< genoapi_1.0.0.8cpe:2.3:o:amd:epyc_8434p_firmware:*:*:*:*:*:*:*:*< genoapi_1.0.0.8cpe:2.3:o:amd:epyc_8534pn_firmware:*:*:*:*:*:*:*:*< genoapi_1.0.0.8cpe:2.3:o:amd:epyc_8534p_firmware:*:*:*:*:*:*:*:*< genoapi_1.0.0.8cpe:2.3:o:amd:epyc_9734_firmware:*:*:*:*:*:*:*:*< genoapi_1.0.0.8cpe:2.3:o:amd:epyc_9754s_firmware:*:*:*:*:*:*:*:*< genoapi_1.0.0.8cpe:2.3:o:amd:epyc_9754_firmware:*:*:*:*:*:*:*:*< genoapi_1.0.0.8cpe:2.3:o:amd:epyc_9184x_firmware:*:*:*:*:*:*:*:*< genoapi_1.0.0.8cpe:2.3:o:amd:epyc_9384x_firmware:*:*:*:*:*:*:*:*< genoapi_1.0.0.8cpe:2.3:o:amd:epyc_9684x_firmware:*:*:*:*:*:*:*:*< genoapi_1.0.0.8cpe:2.3:o:amd:epyc_9124_firmware:*:*:*:*:*:*:*:*< genoapi_1.0.0.8cpe:2.3:o:amd:epyc_9174f_firmware:*:*:*:*:*:*:*:*< genoapi_1.0.0.8cpe:2.3:o:amd:epyc_9224_firmware:*:*:*:*:*:*:*:*< genoapi_1.0.0.8cpe:2.3:o:amd:epyc_9254_firmware:*:*:*:*:*:*:*:*< genoapi_1.0.0.8cpe:2.3:o:amd:epyc_9274f_firmware:*:*:*:*:*:*:*:*< genoapi_1.0.0.8cpe:2.3:o:amd:epyc_9334_firmware:*:*:*:*:*:*:*:*< genoapi_1.0.0.8cpe:2.3:o:amd:epyc_9354_firmware:*:*:*:*:*:*:*:*< genoapi_1.0.0.8cpe:2.3:o:amd:epyc_9354p_firmware:*:*:*:*:*:*:*:*< genoapi_1.0.0.8cpe:2.3:o:amd:epyc_9374f_firmware:*:*:*:*:*:*:*:*< genoapi_1.0.0.8cpe:2.3:o:amd:epyc_9454_firmware:*:*:*:*:*:*:*:*< genoapi_1.0.0.8cpe:2.3:o:amd:epyc_9454p_firmware:*:*:*:*:*:*:*:*< genoapi_1.0.0.8cpe:2.3:o:amd:epyc_9474f_firmware:*:*:*:*:*:*:*:*< genoapi_1.0.0.8cpe:2.3:o:amd:epyc_9534_firmware:*:*:*:*:*:*:*:*< genoapi_1.0.0.8cpe:2.3:o:amd:epyc_9554_firmware:*:*:*:*:*:*:*:*< genoapi_1.0.0.8cpe:2.3:o:amd:epyc_9554p_firmware:*:*:*:*:*:*:*:*< genoapi_1.0.0.8cpe:2.3:o:amd:epyc_9634_firmware:*:*:*:*:*:*:*:*< genoapi_1.0.0.8cpe:2.3:o:amd:epyc_9654_firmware:*:*:*:*:*:*:*:*< genoapi_1.0.0.8cpe:2.3:o:amd:epyc_9654p_firmware:*:*:*:*:*:*:*:*< genoapi_1.0.0.8cpe:2.3:o:amd:epyc_7203_firmware:*:*:*:*:*:*:*:*< milanpi_1.0.0.bcpe:2.3:o:amd:epyc_7203p_firmware:*:*:*:*:*:*:*:*< milanpi_1.0.0.bcpe:2.3:o:amd:epyc_72f3_firmware:*:*:*:*:*:*:*:*< milanpi_1.0.0.bcpe:2.3:o:amd:epyc_7303_firmware:*:*:*:*:*:*:*:*< milanpi_1.0.0.b- +25 more
Affected products
| Product | Versions |
|---|---|
| AMD · AMD EPYC™ 7003 Series Processors | unaffected MilanPI 1.0.0.B |
| AMD · AMD EPYC™ 9004 Series Processors | unaffected Genoa 1.0.0.8 |
| AMD · AMD EPYC™ Embedded 7003 Series Processors | unaffected EmbMilanPI-SP3 1.0.0.7 |
| AMD · AMD EPYC™ Embedded 9003 Series Processors | unaffected EmbGenoaPI-SP5 1.0.0.3 |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |