CVE-2023-20528
—CVSS 3.1
2.4 low
EPSS
<1%p16
Published
()
Modified
Description
Insufficient input validation in the SMU may allow a physical attacker to exfiltrate SMU memory contents over the I2C bus potentially leading to a loss of confidentiality.
- Vendors
- amd
- Products
- epyc 7h12 firmware, epyc 7f72 firmware, epyc 7f52 firmware, epyc 7f32 firmware, epyc 7742 firmware, epyc 7702p firmware, epyc 7702 firmware, epyc 7662 firmware, epyc 7642 firmware, epyc 7552 firmware, epyc 7542 firmware, epyc 7532 firmware
- Weakness
- CWE-20
- Vector
- CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
In the news0 stories
No ingested article mentions this CVE yet.