Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-20533


Insufficient DRAM address validation in System Management Unit (SMU) may allow an attacker to read/write from/to an invalid DRAM address, potentially resulting in denial-of-service.


Security Impact Summary

This vulnerability carries a MEDIUM severity rating with a CVSS v3.1 score of 6.1, requiring local system access to exploit but requires specific conditions to be met without requiring user interaction . The vulnerability impacts limited integrity, and availability (service disruption) for affected systems. Impacting 170 products from amd, from amd, from amd and 167 others, organizations running these solutions should prioritize assessment and patching.

Historical Context

Reported in 2023, this vulnerability emerged during an era marked by increased sophistication in supply chain attacks, cloud infrastructure vulnerabilities, and software-as-a-service (SaaS) security challenges. Security practices during this period emphasized zero-trust architectures, container security, and API protection.


Published

2023-11-14T19:15:15.687

Last Modified

2024-11-21T07:41:06.163

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 6.1 (MEDIUM)

Weaknesses
  • Type: Primary
    NVD-CWE-noinfo

Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System amd epyc_7232p_firmware < romepi_1.0.0.d Yes
Hardware amd epyc_7232p - No
Operating System amd epyc_7252_firmware < romepi_1.0.0.d Yes
Hardware amd epyc_7252 - No
Operating System amd epyc_7262_firmware < romepi_1.0.0.d Yes
Hardware amd epyc_7262 - No
Operating System amd epyc_7272_firmware < romepi_1.0.0.d Yes
Hardware amd epyc_7272 - No
Operating System amd epyc_7282_firmware < romepi_1.0.0.d Yes
Hardware amd epyc_7282 - No
Operating System amd epyc_7302_firmware < romepi_1.0.0.d Yes
Hardware amd epyc_7302 - No
Operating System amd epyc_7302p_firmware < romepi_1.0.0.d Yes
Hardware amd epyc_7302p - No
Operating System amd epyc_7352_firmware < romepi_1.0.0.d Yes
Hardware amd epyc_7352 - No
Operating System amd epyc_7402_firmware < romepi_1.0.0.d Yes
Hardware amd epyc_7402 - No
Operating System amd epyc_7402p_firmware < romepi_1.0.0.d Yes
Hardware amd epyc_7402p - No
Operating System amd epyc_7452_firmware < romepi_1.0.0.d Yes
Hardware amd epyc_7452 - No
Operating System amd epyc_7502_firmware < romepi_1.0.0.d Yes
Hardware amd epyc_7502 - No
Operating System amd epyc_7502p_firmware < romepi_1.0.0.d Yes
Hardware amd epyc_7502p - No
Operating System amd epyc_7532_firmware < romepi_1.0.0.d Yes
Hardware amd epyc_7532 - No
Operating System amd epyc_7542_firmware < romepi_1.0.0.d Yes
Hardware amd epyc_7542 - No
Operating System amd epyc_7552_firmware < romepi_1.0.0.d Yes
Hardware amd epyc_7552 - No
Operating System amd epyc_7642_firmware < romepi_1.0.0.d Yes
Hardware amd epyc_7642 - No
Operating System amd epyc_7662_firmware < romepi_1.0.0.d Yes
Hardware amd epyc_7662 - No
Operating System amd epyc_7702_firmware < romepi_1.0.0.d Yes
Hardware amd epyc_7702 - No
Operating System amd epyc_7702p_firmware < romepi_1.0.0.d Yes
Hardware amd epyc_7702p - No
Operating System amd epyc_7742_firmware < romepi_1.0.0.d Yes
Hardware amd epyc_7742 - No
Operating System amd epyc_7f32_firmware < romepi_1.0.0.d Yes
Hardware amd epyc_7f32 - No
Operating System amd epyc_7f52_firmware < romepi_1.0.0.d Yes
Hardware amd epyc_7f52 - No
Operating System amd epyc_7f72_firmware < romepi_1.0.0.d Yes
Hardware amd epyc_7f72 - No
Operating System amd epyc_7h12_firmware < romepi_1.0.0.d Yes
Hardware amd epyc_7h12 - No
Operating System amd epyc_7763_firmware < milanpi_1.0.0.5 Yes
Hardware amd epyc_7763 - No
Operating System amd epyc_7713p_firmware < milanpi_1.0.0.5 Yes
Hardware amd epyc_7713p - No
Operating System amd epyc_7713_firmware < milanpi_1.0.0.5 Yes
Hardware amd epyc_7713 - No
Operating System amd epyc_7663p_firmware < milanpi_1.0.0.5 Yes
Hardware amd epyc_7663p - No
Operating System amd epyc_7663_firmware < milanpi_1.0.0.5 Yes
Hardware amd epyc_7663 - No
Operating System amd epyc_7643p_firmware < milanpi_1.0.0.5 Yes
Hardware amd epyc_7643p - No
Operating System amd epyc_7773x_firmware < milanpi_1.0.0.5 Yes
Hardware amd epyc_7773x - No
Operating System amd epyc_7643_firmware < milanpi_1.0.0.5 Yes
Hardware amd epyc_7643 - No
Operating System amd epyc_7573x_firmware < milanpi_1.0.0.5 Yes
Hardware amd epyc_7573x - No
Operating System amd epyc_75f3_firmware < milanpi_1.0.0.5 Yes
Hardware amd epyc_75f3 - No
Operating System amd epyc_7543p_firmware < milanpi_1.0.0.5 Yes
Hardware amd epyc_7543p - No
Operating System amd epyc_7543_firmware < milanpi_1.0.0.5 Yes
Hardware amd epyc_7543 - No
Operating System amd epyc_7513_firmware < milanpi_1.0.0.5 Yes
Hardware amd epyc_7513 - No
Operating System amd epyc_7473x_firmware < milanpi_1.0.0.5 Yes
Hardware amd epyc_7473x - No
Operating System amd epyc_7453_firmware < milanpi_1.0.0.5 Yes
Hardware amd epyc_7453 - No
Operating System amd epyc_74f3_firmware < milanpi_1.0.0.5 Yes
Hardware amd epyc_74f3 - No
Operating System amd epyc_7443p_firmware < milanpi_1.0.0.5 Yes
Hardware amd epyc_7443p - No
Operating System amd epyc_7443_firmware < milanpi_1.0.0.5 Yes
Hardware amd epyc_7443 - No
Operating System amd epyc_7413_firmware < milanpi_1.0.0.5 Yes
Hardware amd epyc_7413 - No
Operating System amd epyc_7373x_firmware < milanpi_1.0.0.5 Yes
Hardware amd epyc_7373x - No
Operating System amd epyc_73f3_firmware < milanpi_1.0.0.5 Yes
Hardware amd epyc_73f3 - No
Operating System amd epyc_7343_firmware < milanpi_1.0.0.5 Yes
Hardware amd epyc_7343 - No
Operating System amd epyc_7313p_firmware < milanpi_1.0.0.5 Yes
Hardware amd epyc_7313p - No
Operating System amd epyc_7313_firmware < milanpi_1.0.0.5 Yes
Hardware amd epyc_7313 - No
Operating System amd epyc_7303p_firmware < milanpi_1.0.0.5 Yes
Hardware amd epyc_7303p - No
Operating System amd epyc_7303_firmware < milanpi_1.0.0.5 Yes
Hardware amd epyc_7303 - No
Operating System amd epyc_72f3_firmware < milanpi_1.0.0.5 Yes
Hardware amd epyc_72f3 - No
Operating System amd epyc_7203p_firmware < milanpi_1.0.0.5 Yes
Hardware amd epyc_7203p - No
Operating System amd epyc_7203_firmware < milanpi_1.0.0.5 Yes
Hardware amd epyc_7203 - No
Operating System amd ryzen_9_3950x_firmware - Yes
Hardware amd ryzen_9_3950x - No
Operating System amd ryzen_9_3900xt_firmware - Yes
Hardware amd ryzen_9_3900xt - No
Operating System amd ryzen_9_3900x_firmware - Yes
Hardware amd ryzen_9_3900x - No
Operating System amd ryzen_9_3900_firmware - Yes
Hardware amd ryzen_9_3900 - No
Operating System amd ryzen_7_3800xt_firmware - Yes
Hardware amd ryzen_7_3800xt - No
Operating System amd ryzen_7_3800x_firmware - Yes
Hardware amd ryzen_7_3800x - No
Operating System amd ryzen_7_3700x_firmware - Yes
Hardware amd ryzen_7_3700x - No
Operating System amd ryzen_5_3600xt_firmware - Yes
Hardware amd ryzen_5_3600xt - No
Operating System amd ryzen_5_3600x_firmware - Yes
Hardware amd ryzen_5_3600x - No
Operating System amd ryzen_5_3600_firmware - Yes
Hardware amd ryzen_5_3600 - No
Operating System amd ryzen_5_3500x_firmware - Yes
Hardware amd ryzen_5_3500x - No
Operating System amd ryzen_5_3500_firmware - Yes
Hardware amd ryzen_5_3500 - No
Operating System amd ryzen_3_3300x_firmware - Yes
Hardware amd ryzen_3_3300x - No
Operating System amd ryzen_3_3100_firmware - Yes
Hardware amd ryzen_3_3100 - No
Operating System amd ryzen_9_5950x_firmware < comboam4v2_pi_1.2.0.9 Yes
Hardware amd ryzen_9_5950x - No
Operating System amd ryzen_9_5900x_firmware < comboam4v2_pi_1.2.0.9 Yes
Hardware amd ryzen_9_5900x - No
Operating System amd ryzen_9_5900_firmware < comboam4v2_pi_1.2.0.9 Yes
Hardware amd ryzen_9_5900 - No
Operating System amd ryzen_7_5800x3d_firmware < comboam4v2_pi_1.2.0.9 Yes
Hardware amd ryzen_7_5800x3d - No
Operating System amd ryzen_7_5800x_firmware < comboam4v2_pi_1.2.0.9 Yes
Hardware amd ryzen_7_5800x - No
Operating System amd ryzen_7_5800_firmware < comboam4v2_pi_1.2.0.9 Yes
Hardware amd ryzen_7_5800 - No
Operating System amd ryzen_7_5700x_firmware < comboam4v2_pi_1.2.0.9 Yes
Hardware amd ryzen_7_5700x - No
Operating System amd ryzen_5_5600x_firmware < comboam4v2_pi_1.2.0.9 Yes
Hardware amd ryzen_5_5600x - No
Operating System amd ryzen_5_5600_firmware < comboam4v2_pi_1.2.0.9 Yes
Hardware amd ryzen_5_5600 - No
Operating System amd ryzen_5_5500_firmware < comboam4v2_pi_1.2.0.9 Yes
Hardware amd ryzen_5_5500 - No
Operating System amd ryzen_threadripper_pro_3945wx_firmware - Yes
Hardware amd ryzen_threadripper_pro_3945wx - No
Operating System amd ryzen_threadripper_pro_3955wx_firmware - Yes
Hardware amd ryzen_threadripper_pro_3955wx - No
Operating System amd ryzen_threadripper_pro_3975wx_firmware - Yes
Hardware amd ryzen_threadripper_pro_3975wx - No
Operating System amd ryzen_threadripper_pro_3995wx_firmware - Yes
Hardware amd ryzen_threadripper_pro_3995wx - No
Operating System amd ryzen_threadripper_3960x_firmware < castlepeakpi-sp3r3_1.0.0.8 Yes
Hardware amd ryzen_threadripper_3960x - No
Operating System amd ryzen_threadripper_3970x_firmware < castlepeakpi-sp3r3_1.0.0.8 Yes
Hardware amd ryzen_threadripper_3970x - No
Operating System amd ryzen_threadripper_3990x_firmware < castlepeakpi-sp3r3_1.0.0.8 Yes
Hardware amd ryzen_threadripper_3990x - No
Operating System amd ryzen_threadripper_pro_3995wx_firmware < chagallwspi-swrx8_1.0.0.5 Yes
Hardware amd ryzen_threadripper_pro_3995wx - No

References

How SecUtils Interprets This CVE

SecUtils normalizes and enriches National Vulnerability Database (NVD) records by standardizing vendor and product identifiers, aggregating vulnerability metadata from both NVD and MITRE sources, and providing structured context for security teams. For amd's affected products, we extract Common Platform Enumeration (CPE) data, Common Weakness Enumeration (CWE) classifications, CVSS severity metrics, and reference data to enable rapid vulnerability prioritization and asset correlation. This record contains no exploit code, proof-of-concept instructions, or attack methodologies—only defensive intelligence necessary for patch management, risk assessment, and security operations.