CVE-2022-23813

🗓️ 10 Jan 2023 20:56:55Reported by AMDType

The software interfaces to ASP and SMU may not enforce the SNP memory security policy resulting in a potential loss of integrity of guest memory in a confidential compute environment

Reporter	Title	Published	Views	Family All 13
Amd	AMD Server Vulnerabilities – January 2023	10 Jan 202300:00	–	amd
BDU FSTEC	The vulnerability of AMD Secure Processor’s microprogrammed software, including the System Management Unit (SMU), arises from the possibility of writing operations outside of the buffer in memory, allowing an attacker to compromise the integrity of the protected information.	1 Mar 202300:00	–	bdu_fstec
CNNVD	AMD System Management Unit 缓冲区错误漏洞	11 Jan 202300:00	–	cnnvd
Cvelist	CVE-2022-23813	10 Jan 202320:56	–	cvelist
EUVD	EUVD-2022-28742	3 Oct 202520:07	–	euvd
NCSC	Vulnerabilities fixed in Dell PowerEdge	13 Jan 202300:00	–	ncsc
NVD	CVE-2022-23813	11 Jan 202308:15	–	nvd
Nvidia	Security Bulletin: NVIDIA DGX A100 and DGX A800 - June 2023	30 Jun 202300:00	–	nvidia
OSV	CVE-2022-23813	11 Jan 202308:15	–	osv
Prion	Design/Logic Flaw	11 Jan 202308:15	–	prion

NVD

Node

amd milanpi-sp3_firmwareRange<1.0.0.9

AND

amd milanpi-sp3Match-

Node

amd romepi_firmwareRange<1.0.0.e

AND

amd romepiMatch-

[
  {
    "defaultStatus": "unaffected",
    "packageName": "AGESA",
    "platforms": [
      "x86"
    ],
    "product": "2nd Gen EPYC",
    "vendor": " AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various "
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "packageName": "AGESA",
    "platforms": [
      "x86"
    ],
    "product": "3rd Gen EPYC",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various "
      }
    ]
  }
]

Source	Link
amd	www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032

17 Jun 2026 04:30Current

6Medium risk

Vulners AI Score6

CVSS 3.15.3

EPSS0.00504

SSVC

CWE-119