CVE-2023-20575 — AMD / 1st Gen AMD EPYC™ Processors

Description (CNA)

A potential power side-channel vulnerability in some AMD processors may allow an authenticated attacker to use the power reporting functionality to monitor a program’s execution inside an AMD SEV VM potentially resulting in a leak of sensitive information.

Affected (CNA)

Vendor / product	Versions
AMD / 1st Gen AMD EPYC™ Processors	affected various
AMD / 2nd Gen AMD EPYC™ Processors	affected various
AMD / 3rd Gen AMD EPYC™ Processors	affected various
AMD / 4th Gen AMD EPYC™ Processors	affected Various

CWE

No CWE identifiers supplied.

References

https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3004

ADP enrichment

CVE

No English description supplied.

https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3004

CISA-ADP

No English description supplied.

No references supplied.