High severity · published Nov 14, 2023
CVE-2023-20533
Insufficient DRAM address validation in System Management Unit (SMU) may allow an attacker to read/write from/to an invalid DRAM address, potentially resulting in…
7.5
CVSS
0.5%
EPSS
No
On KEV
Description
Insufficient DRAM address validation in System
Management Unit (SMU) may allow an attacker to read/write from/to an invalid
DRAM address, potentially resulting in denial-of-service.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 43% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
E7
Epyc 7203 Firmware · Amd
before milanpi_1.0.0.5 · source: NVD
E7
Epyc 7203p Firmware · Amd
before milanpi_1.0.0.5 · source: NVD
E7
Epyc 7232p Firmware · Amd
before romepi_1.0.0.d · source: NVD
E7
Epyc 7252 Firmware · Amd
before romepi_1.0.0.d · source: NVD
E7
Epyc 7262 Firmware · Amd
before romepi_1.0.0.d · source: NVD
E7
Epyc 7272 Firmware · Amd
before romepi_1.0.0.d · source: NVD
E7
Epyc 7282 Firmware · Amd
before romepi_1.0.0.d · source: NVD
E7
Epyc 72f3 Firmware · Amd
before milanpi_1.0.0.5 · source: NVD
E7
Epyc 7302 Firmware · Amd
before romepi_1.0.0.d · source: NVD
E7
Epyc 7302p Firmware · Amd
before romepi_1.0.0.d · source: NVD
E7
Epyc 7303 Firmware · Amd
before milanpi_1.0.0.5 · source: NVD
E7
Epyc 7303p Firmware · Amd
before milanpi_1.0.0.5 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2023-20533
CVE.org
https://www.cve.org/CVERecord?id=CVE-2023-20533
Vendor Advisory
https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3002
Vendor Advisory
https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4002
www.amd.com
https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-5001
More from Epyc 7203 Firmware
10.0
CVE-2023-20591
Improper re-initialization of IOMMU during the DRTM event may permit an untrusted platform configuration to persist, allowing an attacker to read or modify hypervisor memory,…
8.2
CVE-2021-26344
An out of bounds memory write when processing the AMD PSP1 Configuration Block (APCB) could allow an attacker with access the ability to modify the BIOS image, and the ability to…
7.9
CVE-2024-21980
Improper restriction of write operations in SNP firmware could allow a malicious hypervisor to potentially overwrite a guest's memory or UMC seed resulting in loss of…
7.9
CVE-2024-21978
Improper input validation in SEV-SNP could allow a malicious hypervisor to read or overwrite guest memory potentially leading to data leakage or data corruption
7.5
CVE-2023-20566
Improper address validation in ASP with SNP enabled may potentially allow an attacker to compromise guest memory integrity