CVE-2023-20592
Medium
Published: 14 November 2023
Published
14 November 2023
Modified
21 November 2024
KEV Added
—
Patch
—
CVSS Score v3.1
6.5
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
EPSS Score
0.0036
58.5th percentile
Risk Priority
13
60% EPSS · 20% KEV · 20% CVSS
Summary
CVE-2023-20592 is a medium-severity an unspecified weakness vulnerability in Amd Epyc 7001 Firmware. Its CVSS base score is 6.5 (Medium).
Operationally, ranked in the top 41.5% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2023-24771
Vulnerability details
Improper or unexpected behavior of the INVD instruction in some AMD CPUs may allow an attacker with a malicious hypervisor to affect cache line write-back behavior of the CPU leading to a potential loss of guest virtual machine (VM) memory…
more
integrity.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
amd
epyc 7001 firmware
all versions
amd
epyc 7251 firmware
all versions
amd
epyc 7261 firmware
all versions
amd
epyc 7281 firmware
all versions
amd
epyc 7301 firmware
all versions
amd
epyc 7351 firmware
all versions
amd
epyc 7351p firmware
all versions
amd
epyc 7371 firmware
all versions
amd
epyc 7401 firmware
all versions
amd
epyc 7401p firmware
all versions
+59 more product configuration(s) — see NVD for full list
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.