Lucene search

[email protected]NVD:CVE-2023-20575

HistoryJul 11, 2023 - 7:15 p.m.

CVE-2023-20575

2023-07-1119:15:09

CWE-203

[email protected]

web.nvd.nist.gov

amd

processor

side-channel

vulnerability

sev vm

power reporting

authenticated

attacker

program execution

sensitive information

leak

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

6.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.1%

JSON

A potential power side-channel vulnerability in some AMD processors may allow an authenticated attacker to use the power reporting functionality to monitor a program’s execution inside an AMD SEV VM potentially resulting in a leak of sensitive information.

Affected configurations

NVD

Node

amdepyc_7251_firmwareMatch-

AND

amdepyc_7251Match-

Node

amdepyc_7281_firmwareMatch-

AND

amdepyc_7281Match-

Node

amdepyc_7301_firmwareMatch-

AND

amdepyc_7301Match-

Node

amdepyc_7351_firmwareMatch-

AND

amdepyc_7351Match-

Node

amdepyc_7351p_firmwareMatch-

AND

amdepyc_7351pMatch-

Node

amdepyc_7401_firmwareMatch-

AND

amdepyc_7401Match-

Node

amdepyc_7401p_firmwareMatch-

AND

amdepyc_7401pMatch-

Node

amdepyc_7451_firmwareMatch-

AND

amdepyc_7451Match-

Node

amdepyc_7501_firmwareMatch-

AND

amdepyc_7501Match-

Node

amdepyc_7551_firmwareMatch-

AND

amdepyc_7551Match-

Node

amdepyc_7551p_firmwareMatch-

AND

amdepyc_7551pMatch-

Node

amdepyc_7601_firmwareMatch-

AND

amdepyc_7601Match-

Node

amdepyc_embedded_3101_firmwareMatch-

AND

amdepyc_embedded_3101Match-

Node

amdepyc_embedded_3151_firmwareMatch-

AND

amdepyc_embedded_3151Match-

Node

amdepyc_embedded_3201_firmwareMatch-

AND

amdepyc_embedded_3201Match-

Node

amdepyc_embedded_3251_firmwareMatch-

AND

amdepyc_embedded_3251Match-

Node

amdepyc_embedded_3255_firmwareMatch-

AND

amdepyc_embedded_3255Match-

Node

amdepyc_embedded_3451_firmwareMatch-

AND

amdepyc_embedded_3451Match-

Node

amdepyc_7232p_firmwareMatch-

AND

amdepyc_7232pMatch-

Node

amdepyc_7252_firmwareMatch-

AND

amdepyc_7252Match-

Node

amdepyc_7262_firmwareMatch-

AND

amdepyc_7262Match-

Node

amdepyc_7272_firmwareMatch-

AND

amdepyc_7272Match-

Node

amdepyc_7302_firmwareMatch-

AND

amdepyc_7302Match-

Node

amdepyc_7302p_firmwareMatch-

AND

amdepyc_7302pMatch-

Node

amdepyc_7352_firmwareMatch-

AND

amdepyc_7352Match-

Node

amdepyc_7402_firmwareMatch-

AND

amdepyc_7402Match-

Node

amdepyc_7402p_firmwareMatch-

AND

amdepyc_7402pMatch-

Node

amdepyc_7452_firmwareMatch-

AND

amdepyc_7452Match-

Node

amdepyc_7502_firmwareMatch-

AND

amdepyc_7502Match-

Node

amdepyc_7502p_firmwareMatch-

AND

amdepyc_7502pMatch-

Node

amdepyc_7532_firmwareMatch-

AND

amdepyc_7532Match-

Node

amdepyc_7542_firmwareMatch-

AND

amdepyc_7542Match-

Node

amdepyc_5552_firmwareMatch-

AND

amdepyc_5552Match-

Node

amdepyc_7642_firmwareMatch-

AND

amdepyc_7642Match-

Node

amdepyc_7662_firmwareMatch-

AND

amdepyc_7662Match-

Node

amdepyc_7702_firmwareMatch-

AND

amdepyc_7702Match-

Node

amdepyc_7702p_firmwareMatch-

AND

amdepyc_7702pMatch-

Node

amdepyc_7742_firmwareMatch-

AND

amdepyc_7742Match-

Node

amdepyc_7f32_firmwareMatch-

AND

amdepyc_7f32Match-

Node

amdepyc_7f52_firmwareMatch-

AND

amdepyc_7f52Match-

Node

amdepyc_7f72_firmwareMatch-

AND

amdepyc_7f72Match-

Node

amdepyc_72f3_firmwareMatch-

AND

amdepyc_72f3Match-

Node

amdepyc_7313_firmwareMatch-

AND

amdepyc_7313Match-

Node

amdepyc_7313p_firmwareMatch-

AND

amdepyc_7313pMatch-

Node

amdepyc_7343_firmwareMatch-

AND

amdepyc_7343Match-

Node

amdepyc_7373x_firmwareMatch-

AND

amdepyc_7373xMatch-

Node

amdepyc_73f3_firmwareMatch-

AND

amdepyc_73f3Match-

Node

amdepyc_7413_firmwareMatch-

AND

amdepyc_7413Match-

Node

amdepyc_7443_firmwareMatch-

AND

amdepyc_7443Match-

Node

amdepyc_7443p_firmwareMatch-

AND

amdepyc_7443pMatch-

Node

amdepyc_7453_firmwareMatch-

AND

amdepyc_7453Match-

Node

amdepyc_7473x_firmwareMatch-

AND

amdepyc_7473xMatch-

Node

amdepyc_74f3_firmwareMatch-

AND

amdepyc_74f3Match-

Node

amdepyc_7513_firmwareMatch-

AND

amdepyc_7513Match-

Node

amdepyc_7543_firmwareMatch-

AND

amdepyc_7543Match-

Node

amdepyc_7543p_firmwareMatch-

AND

amdepyc_7543pMatch-

Node

amdepyc_7573x_firmwareMatch-

AND

amdepyc_7573xMatch-

Node

amdepyc_75f3_firmwareMatch-

AND

amdepyc_75f3Match-

Node

amdepyc_7643_firmwareMatch-

AND

amdepyc_7643Match-

Node

amdepyc_7663_firmwareMatch-

AND

amdepyc_7663Match-

Node

amdepyc_7713_firmwareMatch-

AND

amdepyc_7713Match-

Node

amdepyc_7713p_firmwareMatch-

AND

amdepyc_7713pMatch-

Node

amdepyc_7763_firmwareMatch-

AND

amdepyc_7763Match-

Node

amdepyc_7773x_firmwareMatch-

AND

amdepyc_7773xMatch-

Node

amdepyc_9124_firmwareMatch-

AND

amdepyc_9124Match-

Node

amdepyc_9174f_firmwareMatch-

AND

amdepyc_9174fMatch-

Node

amdepyc_9184x_firmwareMatch-

AND

amdepyc_9184xMatch-

Node

amdepyc_9224_firmwareMatch-

AND

amdepyc_9224Match-

Node

amdepyc_9254_firmwareMatch-

AND

amdepyc_9254Match-

Node

amdepyc_9274f_firmwareMatch-

AND

amdepyc_9274fMatch-

Node

amdepyc_9334_firmwareMatch-

AND

amdepyc_9334Match-

Node

amdepyc_9354_firmwareMatch-

AND

amdepyc_9354Match-

Node

amdepyc_9354p_firmwareMatch-

AND

amdepyc_9354pMatch-

Node

amdepyc_9374f_firmwareMatch-

AND

amdepyc_9374fMatch-

Node

amdepyc_9384x_firmwareMatch-

AND

amdepyc_9384xMatch-

Node

amdepyc_9454_firmwareMatch-

AND

amdepyc_9454Match-

Node

amdepyc_9454p_firmwareMatch-

AND

amdepyc_9454pMatch-

Node

amdepyc_9474f_firmwareMatch-

AND

amdepyc_9474fMatch-

Node

amdepyc_9534_firmwareMatch-

AND

amdepyc_9534Match-

Node

amdepyc_9554p_firmwareMatch-

AND

amdepyc_9554pMatch-

Node

amdepyc_9554_firmwareMatch-

AND

amdepyc_9554Match-

Node

amdepyc_9634_firmwareMatch-

AND

amdepyc_9634Match-

Node

amdepyc_9654_firmwareMatch-

AND

amdepyc_9654Match-

Node

amdepyc_9654p_firmwareMatch-

AND

amdepyc_9654pMatch-

Node

amdepyc_9684x_firmwareMatch-

AND

amdepyc_9684xMatch-

Node

amdepyc_9734_firmwareMatch-

AND

amdepyc_9734Match-

Node

amdepyc_9754_firmwareMatch-

AND

amdepyc_9754Match-

Node

amdepyc_9754s_firmwareMatch-

AND

amdepyc_9754sMatch-

References

www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3004

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

6.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.1%

JSON

Related for NVD:CVE-2023-20575

cve1 prion1 redhatcve1 amd1 cvelist1