CVE-2023-20593

PoC —

CVSS 3.1

5.5 medium

EPSS

5%p92

Published

Jul 24, 2023 (Jul 24, 2023)

Modified

Jun 17, 2026

Description

An issue in “Zen 2” CPUs, under specific microarchitectural circumstances, may allow an attacker to potentially access sensitive information.

Vendors: xen debian amd
Products: xen, debian linux, ryzen 3 3100 firmware, ryzen 3 3300x firmware, ryzen 5 3500 firmware, ryzen 5 3500x firmware, ryzen 5 3600 firmware, ryzen 5 3600x firmware, ryzen 5 3600xt firmware, ryzen 7 3700x firmware, ryzen 7 3800x firmware, ryzen 7 3800xt firmware
Weakness: CWE-209
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (5.2%)

In the news4 stories

Collide+Power, Downfall, and Inception: New Side

The Hacker NewsAug 10, 08:33 UTC · Aug 10, 2023Vulnerability CVE-2023-20583 CVE-2022-40982 CVE-2023-20569+3 CVEs

60

Zenbleed: New Flaw in AMD Zen 2 Processors Puts Encryption Keys and Passwords at Risk

The Hacker NewsJul 27, 06:35 UTC · Jul 27, 2023Exploit / PoC in the wildCVE-2023-20593

60

Intel patches high-severity vulnerability affecting central processing units

The RecordNov 15, 15:33 UTC · Nov 15, 2023Vulnerability CVE-2023-23583 CVE-2022-40982 CVE-2023-20593

47

Downfall attacks can gather passwords, encryption keys from Intel processors

Help Net SecurityAug 9, 00:00 UTC · Aug 9, 2023Vulnerability CVE-2022-40982 CVE-2023-20593 CVE-2023-20569

35