AMD 3rd Gen AMD EPYC™ Processors

CVE-2023-31347

MEDIUM 4.9

At a glance

Source: NVD
EPSS: EPSS 0.46 % · percentile 40 (2026-10-29)
State: PUBLISHED
Published: 2024-02-13 19:18 UTC
Updated: 2025-03-17 17:46 UTC
Assigner: AMD
NVD status: Modified

Search on…

Description

Due to a code bug in Secure_TSC, SEV firmware may allow an attacker with high privileges to cause a guest to observe an incorrect TSC when Secure TSC is enabled potentially resulting in a loss of guest integrity.

Weaknesses (CWE)

CWE-682 — Incorrect Calculation

References

https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3007

Scores

Version	Score	Vector	Scored by
CVSS 3.1	MEDIUM 4.9	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N	CISA-ADP
CVSS 3.1	MEDIUM 4.9	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N	NVD · nvd@nist.gov (Primary)
CVSS 3.1	MEDIUM 4.9	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N	NVD · 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

European references

ENISA EUVD · EUVD-2023-35658
GCVE · GCVE-0-2023-31347

CERT-FR advisories

CERTFR-2026-AVI-0326 — Multiples vulnérabilités dans les produits VMware · cert.ssi.gouv.fr
CERTFR-2026-AVI-0316 — Multiples vulnérabilités dans les produits VMware · cert.ssi.gouv.fr

Affected configurations (NVD CPE)

cpe:2.3:o:amd:epyc_7773x_firmware:*:*:*:*:*:*:*:* < milanpi_1.0.0.c
cpe:2.3:o:amd:epyc_7763_firmware:*:*:*:*:*:*:*:* < milanpi_1.0.0.c
cpe:2.3:o:amd:epyc_7713_firmware:*:*:*:*:*:*:*:* < milanpi_1.0.0.c
cpe:2.3:o:amd:epyc_7713p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:amd:epyc_7663_firmware:*:*:*:*:*:*:*:* < milanpi_1.0.0.c
cpe:2.3:o:amd:epyc_7663p_firmware:*:*:*:*:*:*:*:* < milanpi_1.0.0.c
cpe:2.3:o:amd:epyc_7643_firmware:*:*:*:*:*:*:*:* < milanpi_1.0.0.c
cpe:2.3:o:amd:epyc_7643p_firmware:*:*:*:*:*:*:*:* < milanpi_1.0.0.c
cpe:2.3:o:amd:epyc_7573x_firmware:*:*:*:*:*:*:*:* < milanpi_1.0.0.c
cpe:2.3:o:amd:epyc_75f3_firmware:*:*:*:*:*:*:*:* < milanpi_1.0.0.c
cpe:2.3:o:amd:epyc_7543_firmware:*:*:*:*:*:*:*:* < milanpi_1.0.0.c
cpe:2.3:o:amd:epyc_7543p_firmware:*:*:*:*:*:*:*:* < milanpi_1.0.0.c
cpe:2.3:o:amd:epyc_7513_firmware:*:*:*:*:*:*:*:* < milanpi_1.0.0.c
cpe:2.3:o:amd:epyc_7453_firmware:*:*:*:*:*:*:*:* < milanpi_1.0.0.c
cpe:2.3:o:amd:epyc_7473x_firmware:*:*:*:*:*:*:*:* < milanpi_1.0.0.c
cpe:2.3:o:amd:epyc_74f3_firmware:*:*:*:*:*:*:*:* < milanpi_1.0.0.c
cpe:2.3:o:amd:epyc_7443_firmware:*:*:*:*:*:*:*:* < milanpi_1.0.0.c
cpe:2.3:o:amd:epyc_7443p_firmware:*:*:*:*:*:*:*:* < milanpi_1.0.0.c
cpe:2.3:o:amd:epyc_7413_firmware:*:*:*:*:*:*:*:* < milanpi_1.0.0.c
cpe:2.3:o:amd:epyc_7373x_firmware:*:*:*:*:*:*:*:* < milanpi_1.0.0.c
cpe:2.3:o:amd:epyc_73f3_firmware:*:*:*:*:*:*:*:* < milanpi_1.0.0.c
cpe:2.3:o:amd:epyc_7343_firmware:*:*:*:*:*:*:*:* < milanpi_1.0.0.c
cpe:2.3:o:amd:epyc_7313_firmware:*:*:*:*:*:*:*:* < milanpi_1.0.0.c
cpe:2.3:o:amd:epyc_7313p_firmware:*:*:*:*:*:*:*:* < milanpi_1.0.0.c
cpe:2.3:o:amd:epyc_7303_firmware:*:*:*:*:*:*:*:* < milanpi_1.0.0.c
cpe:2.3:o:amd:epyc_7303p_firmware:*:*:*:*:*:*:*:* < milanpi_1.0.0.c
cpe:2.3:o:amd:epyc_72f3_firmware:*:*:*:*:*:*:*:* < milanpi_1.0.0.c
cpe:2.3:o:amd:epyc_7203_firmware:*:*:*:*:*:*:*:* < milanpi_1.0.0.c
cpe:2.3:o:amd:epyc_7203p_firmware:*:*:*:*:*:*:*:* < milanpi_1.0.0.c
cpe:2.3:o:amd:epyc_8024p_firmware:*:*:*:*:*:*:*:* < genoapi_1.0.0.b
cpe:2.3:o:amd:epyc_8024pn_firmware:*:*:*:*:*:*:*:* < genoapi_1.0.0.b
cpe:2.3:o:amd:epyc_8124p_firmware:*:*:*:*:*:*:*:* < genoapi_1.0.0.b
cpe:2.3:o:amd:epyc_8124pn_firmware:*:*:*:*:*:*:*:* < genoapi_1.0.0.b
cpe:2.3:o:amd:epyc_8224p_firmware:*:*:*:*:*:*:*:* < genoapi_1.0.0.b
cpe:2.3:o:amd:epyc_8224pn_firmware:*:*:*:*:*:*:*:* < genoapi_1.0.0.b
cpe:2.3:o:amd:epyc_8324p_firmware:*:*:*:*:*:*:*:* < genoapi_1.0.0.b
cpe:2.3:o:amd:epyc_8324pn_firmware:*:*:*:*:*:*:*:* < genoapi_1.0.0.b
cpe:2.3:o:amd:epyc_8434p_firmware:*:*:*:*:*:*:*:* < genoapi_1.0.0.b
cpe:2.3:o:amd:epyc_8434pn_firmware:*:*:*:*:*:*:*:* < genoapi_1.0.0.b
cpe:2.3:o:amd:epyc_8534p_firmware:*:*:*:*:*:*:*:* < genoapi_1.0.0.b
+22 more

Affected products

Product	Versions
AMD · 3rd Gen AMD EPYC™ Processors	affected various
AMD · 4th Gen AMD EPYC™ Processors	affected various

Sources

Source	Licence
CVE List (CVEProject cvelistV5)	CVE Program Terms of Use
EPSS (FIRST.org)	FIRST — attribution requested
ENISA EUVD	ENISA — reproduction authorised, source acknowledged
CERT-FR (ANSSI)	Licence Ouverte / Etalab 2.0
NVD (NIST) via fkie-cad/nvd-json-data-feeds	Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD

🟡 AMD 3rd Gen AMD EPYC™ Processors