CVE-2023-20573

LOWCVSS 3.2/10EPSS 0.29%

Last modified

CVE-2023-20573 is a low-severity vulnerability rated 3.2/10 on the CVSS scale. A privileged attacker can prevent delivery of debug exceptions to SEV-SNP guests potentially resulting in guests not receiving expected debug information. . EPSS estimates a 0.29% chance of exploitation in the next 30 days.

Description

A privileged attacker can prevent delivery of debug exceptions to SEV-SNP guests potentially resulting in guests not receiving expected debug information.

Metrics

CVSS 3.1
3.2/10

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:N

EPSS Probability
0.29%

20.5th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersions
AmdEpyc 7763 FirmwareAll versions
AmdEpyc 7713p FirmwareAll versions
AmdEpyc 7713 FirmwareAll versions
AmdEpyc 7663p FirmwareAll versions
AmdEpyc 7663 FirmwareAll versions
AmdEpyc 7643p FirmwareAll versions
AmdEpyc 7773x FirmwareAll versions
AmdEpyc 7643 FirmwareAll versions
AmdEpyc 7573x FirmwareAll versions
AmdEpyc 75f3 FirmwareAll versions
AmdEpyc 7543p FirmwareAll versions
AmdEpyc 7543 FirmwareAll versions
AmdEpyc 7513 FirmwareAll versions
AmdEpyc 7473x FirmwareAll versions
AmdEpyc 7453 FirmwareAll versions
AmdEpyc 74f3 FirmwareAll versions
AmdEpyc 7443p FirmwareAll versions
AmdEpyc 7443 FirmwareAll versions
AmdEpyc 7413 FirmwareAll versions
AmdEpyc 7373x FirmwareAll versions
AmdEpyc 73f3 FirmwareAll versions
AmdEpyc 7343 FirmwareAll versions
AmdEpyc 7313p FirmwareAll versions
AmdEpyc 7313 FirmwareAll versions
AmdEpyc 7303p FirmwareAll versions
AmdEpyc 7303 FirmwareAll versions
AmdEpyc 72f3 FirmwareAll versions
AmdEpyc 7203p FirmwareAll versions
AmdEpyc 7203 FirmwareAll versions
AmdEpyc 9654p FirmwareAll versions
AmdEpyc 9654 FirmwareAll versions
AmdEpyc 9634 FirmwareAll versions
AmdEpyc 9554p FirmwareAll versions
AmdEpyc 9554 FirmwareAll versions
AmdEpyc 9534 FirmwareAll versions
AmdEpyc 9474f FirmwareAll versions
AmdEpyc 9454p FirmwareAll versions
AmdEpyc 9454 FirmwareAll versions
AmdEpyc 9374f FirmwareAll versions
AmdEpyc 9354p FirmwareAll versions
AmdEpyc 9354 FirmwareAll versions
AmdEpyc 9334 FirmwareAll versions
AmdEpyc 9274f FirmwareAll versions
AmdEpyc 9254 FirmwareAll versions
AmdEpyc 9224 FirmwareAll versions
AmdEpyc 9174f FirmwareAll versions
AmdEpyc 9124 FirmwareAll versions
AmdEpyc 9684x FirmwareAll versions
AmdEpyc 9384x FirmwareAll versions
AmdEpyc 9184x FirmwareAll versions

Showing 50 of 65 affected configurations. See NVD for the full list.

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2023-20573?
A privileged attacker can prevent delivery of debug exceptions to SEV-SNP guests potentially resulting in guests not receiving expected debug information.
How severe is CVE-2023-20573?
CVE-2023-20573 has a CVSS score of 3.2/10 (LOW severity). The EPSS model estimates a 0.29% probability of exploitation in the next 30 days.
How do I fix CVE-2023-20573?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2023-20573?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST