ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2023-20575

—
CVSS 3.1
6.5 medium
EPSS
<1%p55
Published
()
Modified
Description

A potential power side-channel vulnerability in some AMD processors may allow an authenticated attacker to use the power reporting functionality to monitor a program’s execution inside an AMD SEV VM potentially resulting in a leak of sensitive information.

Vendors
amd
Products
epyc 7251 firmware, epyc 7281 firmware, epyc 7301 firmware, epyc 7351 firmware, epyc 7351p firmware, epyc 7401 firmware, epyc 7401p firmware, epyc 7451 firmware, epyc 7501 firmware, epyc 7551 firmware, epyc 7551p firmware, epyc 7601 firmware
Weakness
CWE-203
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
NVD CVE.org GitHub PoCs EPSS (0.8%)

In the news

No ingested article mentions this CVE yet.