CVE-2023-20575

Medium

Description

A potential power side-channel vulnerability in some AMD processors may allow an authenticated attacker to use the power reporting functionality to monitor a program’s execution inside an AMD SEV VM potentially resulting in a leak of sensitive information.

SeverityMedium
CVSS6.5
Exploit probability—
ProductAmd Epyc 7251 Firmware
PublishedJul 11, 2023
First seenJul 11, 2023
Weakness typeCWE-203CWE-203

How to fix

Affected products

ProductAffected versionsFixed in
amd epyc_7251_firmwareNo range specified—
amd epyc_7281_firmwareNo range specified—
amd epyc_7301_firmwareNo range specified—
amd epyc_7351_firmwareNo range specified—
amd epyc_7351p_firmwareNo range specified—
amd epyc_7401_firmwareNo range specified—
amd epyc_7401p_firmwareNo range specified—
amd epyc_7451_firmwareNo range specified—
amd epyc_7501_firmwareNo range specified—
amd epyc_7551_firmwareNo range specified—
amd epyc_7551p_firmwareNo range specified—
amd epyc_7601_firmwareNo range specified—
amd epyc_embedded_3101_firmwareNo range specified—
amd epyc_embedded_3151_firmwareNo range specified—
amd epyc_embedded_3201_firmwareNo range specified—
amd epyc_embedded_3251_firmwareNo range specified—
amd epyc_embedded_3255_firmwareNo range specified—
amd epyc_embedded_3451_firmwareNo range specified—
amd epyc_7232p_firmwareNo range specified—
amd epyc_7252_firmwareNo range specified—
amd epyc_7262_firmwareNo range specified—
amd epyc_7272_firmwareNo range specified—
amd epyc_7302_firmwareNo range specified—
amd epyc_7302p_firmwareNo range specified—
amd epyc_7352_firmwareNo range specified—
amd epyc_7402_firmwareNo range specified—
amd epyc_7402p_firmwareNo range specified—
amd epyc_7452_firmwareNo range specified—
amd epyc_7502_firmwareNo range specified—
amd epyc_7502p_firmwareNo range specified—
amd epyc_7532_firmwareNo range specified—
amd epyc_7542_firmwareNo range specified—
amd epyc_5552_firmwareNo range specified—
amd epyc_7642_firmwareNo range specified—
amd epyc_7662_firmwareNo range specified—
amd epyc_7702_firmwareNo range specified—
amd epyc_7702p_firmwareNo range specified—
amd epyc_7742_firmwareNo range specified—
amd epyc_7f32_firmwareNo range specified—
amd epyc_7f52_firmwareNo range specified—
amd epyc_7f72_firmwareNo range specified—
amd epyc_72f3_firmwareNo range specified—
amd epyc_7313_firmwareNo range specified—
amd epyc_7313p_firmwareNo range specified—
amd epyc_7343_firmwareNo range specified—
amd epyc_7373x_firmwareNo range specified—
amd epyc_73f3_firmwareNo range specified—
amd epyc_7413_firmwareNo range specified—
amd epyc_7443_firmwareNo range specified—
amd epyc_7443p_firmwareNo range specified—
amd epyc_7453_firmwareNo range specified—
amd epyc_7473x_firmwareNo range specified—
amd epyc_74f3_firmwareNo range specified—
amd epyc_7513_firmwareNo range specified—
amd epyc_7543_firmwareNo range specified—
amd epyc_7543p_firmwareNo range specified—
amd epyc_7573x_firmwareNo range specified—
amd epyc_75f3_firmwareNo range specified—
amd epyc_7643_firmwareNo range specified—
amd epyc_7663_firmwareNo range specified—
amd epyc_7713_firmwareNo range specified—
amd epyc_7713p_firmwareNo range specified—
amd epyc_7763_firmwareNo range specified—
amd epyc_7773x_firmwareNo range specified—
amd epyc_9124_firmwareNo range specified—
amd epyc_9174f_firmwareNo range specified—
amd epyc_9184x_firmwareNo range specified—
amd epyc_9224_firmwareNo range specified—
amd epyc_9254_firmwareNo range specified—
amd epyc_9274f_firmwareNo range specified—
amd epyc_9334_firmwareNo range specified—
amd epyc_9354_firmwareNo range specified—
amd epyc_9354p_firmwareNo range specified—
amd epyc_9374f_firmwareNo range specified—
amd epyc_9384x_firmwareNo range specified—
amd epyc_9454_firmwareNo range specified—
amd epyc_9454p_firmwareNo range specified—
amd epyc_9474f_firmwareNo range specified—
amd epyc_9534_firmwareNo range specified—
amd epyc_9554p_firmwareNo range specified—
amd epyc_9554_firmwareNo range specified—
amd epyc_9634_firmwareNo range specified—
amd epyc_9654_firmwareNo range specified—
amd epyc_9654p_firmwareNo range specified—
amd epyc_9684x_firmwareNo range specified—
amd epyc_9734_firmwareNo range specified—
amd epyc_9754_firmwareNo range specified—
amd epyc_9754s_firmwareNo range specified—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.