CVE-2022-23813

🗓️ 10 Jan 2023 20:56:55Reported by AMDType

The software interfaces to ASP and SMU may not enforce the SNP memory security policy resulting in a potential loss of integrity of guest memory in a confidential compute environment

Reporter	Title	Published	Views	Family All 11
Amd	AMD Server Vulnerabilities – January 2023	10 Jan 202300:00	–	amd
CNNVD	AMD System Management Unit 缓冲区错误漏洞	11 Jan 202300:00	–	cnnvd
Cvelist	CVE-2022-23813	10 Jan 202320:56	–	cvelist
EUVD	EUVD-2022-28742	3 Oct 202520:07	–	euvd
NCSC	Vulnerabilities fixed in Dell PowerEdge	13 Jan 202300:00	–	ncsc
NVD	CVE-2022-23813	11 Jan 202308:15	–	nvd
Nvidia	Security Bulletin: NVIDIA DGX A100 and DGX A800 - June 2023	30 Jun 202300:00	–	nvidia
Prion	Design/Logic Flaw	11 Jan 202308:15	–	prion
Positive Technologies	PT-2023-1482 · Amd · Amd System Management Unit +1	10 Jan 202300:00	–	ptsecurity
RedhatCVE	CVE-2022-23813	25 Jan 202313:35	–	redhatcve

NVD

Node

amd milanpi-sp3_firmwareRange<1.0.0.9

AND

amd milanpi-sp3Match-

Node

amd romepi_firmwareRange<1.0.0.e

AND

amd romepiMatch-

[
  {
    "defaultStatus": "unaffected",
    "packageName": "AGESA",
    "platforms": [
      "x86"
    ],
    "product": "2nd Gen EPYC",
    "vendor": " AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various "
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "packageName": "AGESA",
    "platforms": [
      "x86"
    ],
    "product": "3rd Gen EPYC",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various "
      }
    ]
  }
]

Source	Link
amd	www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032

09 Apr 2025 15:15Current

6Medium risk

Vulners AI Score6

CVSS 3.15.3

EPSS0.00249

SSVC

CWE-119