Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-20575


A potential power side-channel vulnerability in some AMD processors may allow an authenticated attacker to use the power reporting functionality to monitor a program’s execution inside an AMD SEV VM potentially resulting in a leak of sensitive information.


Security Impact Summary

This vulnerability carries a MEDIUM severity rating with a CVSS v3.1 score of 6.5, indicating it can be exploited remotely over the network with relatively low complexity without requiring user interaction requiring only low-level privileges . The vulnerability impacts confidentiality (data exposure), for affected systems. Impacting 176 products from amd, from amd, from amd and 173 others, organizations running these solutions should prioritize assessment and patching.

Historical Context

Reported in 2023, this vulnerability emerged during an era marked by increased sophistication in supply chain attacks, cloud infrastructure vulnerabilities, and software-as-a-service (SaaS) security challenges. Security practices during this period emphasized zero-trust architectures, container security, and API protection.


Published

2023-07-11T19:15:09.547

Last Modified

2024-11-27T16:15:08.010

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 6.5 (MEDIUM)

Weaknesses
  • Type: Primary
    CWE-203
  • Type: Secondary
    CWE-203

Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System amd epyc_7251_firmware - Yes
Hardware amd epyc_7251 - No
Operating System amd epyc_7281_firmware - Yes
Hardware amd epyc_7281 - No
Operating System amd epyc_7301_firmware - Yes
Hardware amd epyc_7301 - No
Operating System amd epyc_7351_firmware - Yes
Hardware amd epyc_7351 - No
Operating System amd epyc_7351p_firmware - Yes
Hardware amd epyc_7351p - No
Operating System amd epyc_7401_firmware - Yes
Hardware amd epyc_7401 - No
Operating System amd epyc_7401p_firmware - Yes
Hardware amd epyc_7401p - No
Operating System amd epyc_7451_firmware - Yes
Hardware amd epyc_7451 - No
Operating System amd epyc_7501_firmware - Yes
Hardware amd epyc_7501 - No
Operating System amd epyc_7551_firmware - Yes
Hardware amd epyc_7551 - No
Operating System amd epyc_7551p_firmware - Yes
Hardware amd epyc_7551p - No
Operating System amd epyc_7601_firmware - Yes
Hardware amd epyc_7601 - No
Operating System amd epyc_embedded_3101_firmware - Yes
Hardware amd epyc_embedded_3101 - No
Operating System amd epyc_embedded_3151_firmware - Yes
Hardware amd epyc_embedded_3151 - No
Operating System amd epyc_embedded_3201_firmware - Yes
Hardware amd epyc_embedded_3201 - No
Operating System amd epyc_embedded_3251_firmware - Yes
Hardware amd epyc_embedded_3251 - No
Operating System amd epyc_embedded_3255_firmware - Yes
Hardware amd epyc_embedded_3255 - No
Operating System amd epyc_embedded_3451_firmware - Yes
Hardware amd epyc_embedded_3451 - No
Operating System amd epyc_7232p_firmware - Yes
Hardware amd epyc_7232p - No
Operating System amd epyc_7252_firmware - Yes
Hardware amd epyc_7252 - No
Operating System amd epyc_7262_firmware - Yes
Hardware amd epyc_7262 - No
Operating System amd epyc_7272_firmware - Yes
Hardware amd epyc_7272 - No
Operating System amd epyc_7302_firmware - Yes
Hardware amd epyc_7302 - No
Operating System amd epyc_7302p_firmware - Yes
Hardware amd epyc_7302p - No
Operating System amd epyc_7352_firmware - Yes
Hardware amd epyc_7352 - No
Operating System amd epyc_7402_firmware - Yes
Hardware amd epyc_7402 - No
Operating System amd epyc_7402p_firmware - Yes
Hardware amd epyc_7402p - No
Operating System amd epyc_7452_firmware - Yes
Hardware amd epyc_7452 - No
Operating System amd epyc_7502_firmware - Yes
Hardware amd epyc_7502 - No
Operating System amd epyc_7502p_firmware - Yes
Hardware amd epyc_7502p - No
Operating System amd epyc_7532_firmware - Yes
Hardware amd epyc_7532 - No
Operating System amd epyc_7542_firmware - Yes
Hardware amd epyc_7542 - No
Operating System amd epyc_5552_firmware - Yes
Hardware amd epyc_5552 - No
Operating System amd epyc_7642_firmware - Yes
Hardware amd epyc_7642 - No
Operating System amd epyc_7662_firmware - Yes
Hardware amd epyc_7662 - No
Operating System amd epyc_7702_firmware - Yes
Hardware amd epyc_7702 - No
Operating System amd epyc_7702p_firmware - Yes
Hardware amd epyc_7702p - No
Operating System amd epyc_7742_firmware - Yes
Hardware amd epyc_7742 - No
Operating System amd epyc_7f32_firmware - Yes
Hardware amd epyc_7f32 - No
Operating System amd epyc_7f52_firmware - Yes
Hardware amd epyc_7f52 - No
Operating System amd epyc_7f72_firmware - Yes
Hardware amd epyc_7f72 - No
Operating System amd epyc_72f3_firmware - Yes
Hardware amd epyc_72f3 - No
Operating System amd epyc_7313_firmware - Yes
Hardware amd epyc_7313 - No
Operating System amd epyc_7313p_firmware - Yes
Hardware amd epyc_7313p - No
Operating System amd epyc_7343_firmware - Yes
Hardware amd epyc_7343 - No
Operating System amd epyc_7373x_firmware - Yes
Hardware amd epyc_7373x - No
Operating System amd epyc_73f3_firmware - Yes
Hardware amd epyc_73f3 - No
Operating System amd epyc_7413_firmware - Yes
Hardware amd epyc_7413 - No
Operating System amd epyc_7443_firmware - Yes
Hardware amd epyc_7443 - No
Operating System amd epyc_7443p_firmware - Yes
Hardware amd epyc_7443p - No
Operating System amd epyc_7453_firmware - Yes
Hardware amd epyc_7453 - No
Operating System amd epyc_7473x_firmware - Yes
Hardware amd epyc_7473x - No
Operating System amd epyc_74f3_firmware - Yes
Hardware amd epyc_74f3 - No
Operating System amd epyc_7513_firmware - Yes
Hardware amd epyc_7513 - No
Operating System amd epyc_7543_firmware - Yes
Hardware amd epyc_7543 - No
Operating System amd epyc_7543p_firmware - Yes
Hardware amd epyc_7543p - No
Operating System amd epyc_7573x_firmware - Yes
Hardware amd epyc_7573x - No
Operating System amd epyc_75f3_firmware - Yes
Hardware amd epyc_75f3 - No
Operating System amd epyc_7643_firmware - Yes
Hardware amd epyc_7643 - No
Operating System amd epyc_7663_firmware - Yes
Hardware amd epyc_7663 - No
Operating System amd epyc_7713_firmware - Yes
Hardware amd epyc_7713 - No
Operating System amd epyc_7713p_firmware - Yes
Hardware amd epyc_7713p - No
Operating System amd epyc_7763_firmware - Yes
Hardware amd epyc_7763 - No
Operating System amd epyc_7773x_firmware - Yes
Hardware amd epyc_7773x - No
Operating System amd epyc_9124_firmware - Yes
Hardware amd epyc_9124 - No
Operating System amd epyc_9174f_firmware - Yes
Hardware amd epyc_9174f - No
Operating System amd epyc_9184x_firmware - Yes
Hardware amd epyc_9184x - No
Operating System amd epyc_9224_firmware - Yes
Hardware amd epyc_9224 - No
Operating System amd epyc_9254_firmware - Yes
Hardware amd epyc_9254 - No
Operating System amd epyc_9274f_firmware - Yes
Hardware amd epyc_9274f - No
Operating System amd epyc_9334_firmware - Yes
Hardware amd epyc_9334 - No
Operating System amd epyc_9354_firmware - Yes
Hardware amd epyc_9354 - No
Operating System amd epyc_9354p_firmware - Yes
Hardware amd epyc_9354p - No
Operating System amd epyc_9374f_firmware - Yes
Hardware amd epyc_9374f - No
Operating System amd epyc_9384x_firmware - Yes
Hardware amd epyc_9384x - No
Operating System amd epyc_9454_firmware - Yes
Hardware amd epyc_9454 - No
Operating System amd epyc_9454p_firmware - Yes
Hardware amd epyc_9454p - No
Operating System amd epyc_9474f_firmware - Yes
Hardware amd epyc_9474f - No
Operating System amd epyc_9534_firmware - Yes
Hardware amd epyc_9534 - No
Operating System amd epyc_9554p_firmware - Yes
Hardware amd epyc_9554p - No
Operating System amd epyc_9554_firmware - Yes
Hardware amd epyc_9554 - No
Operating System amd epyc_9634_firmware - Yes
Hardware amd epyc_9634 - No
Operating System amd epyc_9654_firmware - Yes
Hardware amd epyc_9654 - No
Operating System amd epyc_9654p_firmware - Yes
Hardware amd epyc_9654p - No
Operating System amd epyc_9684x_firmware - Yes
Hardware amd epyc_9684x - No
Operating System amd epyc_9734_firmware - Yes
Hardware amd epyc_9734 - No
Operating System amd epyc_9754_firmware - Yes
Hardware amd epyc_9754 - No
Operating System amd epyc_9754s_firmware - Yes
Hardware amd epyc_9754s - No

References

How SecUtils Interprets This CVE

SecUtils normalizes and enriches National Vulnerability Database (NVD) records by standardizing vendor and product identifiers, aggregating vulnerability metadata from both NVD and MITRE sources, and providing structured context for security teams. For amd's affected products, we extract Common Platform Enumeration (CPE) data, Common Weakness Enumeration (CWE) classifications, CVSS severity metrics, and reference data to enable rapid vulnerability prioritization and asset correlation. This record contains no exploit code, proof-of-concept instructions, or attack methodologies—only defensive intelligence necessary for patch management, risk assessment, and security operations.