CVSS 3.1
10.0 criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:HCVE-2023-20591
Critical (10.0) in amd. EPSS 0.3% chance of exploitation in the next 30 days.
Improper re-initialization of IOMMU during the DRTM event
may permit an untrusted platform configuration to persist, allowing an attacker
to read or modify hypervisor memory, potentially resulting in loss of
confidentiality, integrity, and availability.
Severity
- EPSS
- 0.3% chance of exploitation in the next 30 days; higher than 22% of CVEs (scores of 2026-10-31)
- CWE
- CWE-665
- Published
- Modified
- Record from
- the NVD, synced
Affected
- amd:epyc_7203_firmware
- amd:epyc_7203p_firmware
- amd:epyc_72f3_firmware
- amd:epyc_7303_firmware
- amd:epyc_7303p_firmware
- amd:epyc_7313_firmware
- amd:epyc_7313p_firmware
- amd:epyc_7343_firmware
- amd:epyc_7373x_firmware
- amd:epyc_73f3_firmware
- amd:epyc_7413_firmware
- amd:epyc_7443_firmware
- amd:epyc_7443p_firmware
- amd:epyc_7453_firmware
- amd:epyc_7473x_firmware
- amd:epyc_74f3_firmware
- amd:epyc_7513_firmware
- amd:epyc_7543_firmware
- amd:epyc_7543p_firmware
- amd:epyc_7573x_firmware
- amd:epyc_75f3_firmware
- amd:epyc_7643_firmware
- amd:epyc_7643p_firmware
- amd:epyc_7663_firmware
- amd:epyc_7663p_firmware
- amd:epyc_7713_firmware
- amd:epyc_7713p_firmware
- amd:epyc_7763_firmware
- amd:epyc_7773x_firmware
- amd:epyc_8024p_firmware
- amd:epyc_8024pn_firmware
- amd:epyc_8124p_firmware
- amd:epyc_8124pn_firmware
- amd:epyc_8224p_firmware
- amd:epyc_8224pn_firmware
- amd:epyc_8324p_firmware
- amd:epyc_8324pn_firmware
- amd:epyc_8434p_firmware
- amd:epyc_8434pn_firmware
- amd:epyc_8534p_firmware
- amd:epyc_8534pn_firmware
- amd:epyc_9124_firmware
- amd:epyc_9174f_firmware
- amd:epyc_9184x_firmware
- amd:epyc_9224_firmware
- amd:epyc_9254_firmware
- amd:epyc_9274f_firmware
- amd:epyc_9334_firmware
- amd:epyc_9354_firmware
- amd:epyc_9354p_firmware