CVE-2023-20573

LOW

SEV-SNP - Privilege Escalation

Title source: llm

Description

A privileged attacker can prevent delivery of debug exceptions to SEV-SNP guests potentially resulting in guests not receiving expected debug information.

Exploits (1)

nomisec WORKING POC 6 stars

by Freax13 · poc

https://github.com/Freax13/cve-2023-20573-poc

View Code ZIP pw:eip

References (1)

[Vendor Advisory] https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3006

Scores

CVSS v3 3.2

EPSS 0.0008

EPSS Percentile 23.8%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:N

Classification

CWE

CWE-693

Status published

Affected Products (50)

amd/epyc_7763_firmware

amd/epyc_7713p_firmware

amd/epyc_7713_firmware

amd/epyc_7663p_firmware

amd/epyc_7663_firmware

amd/epyc_7643p_firmware

amd/epyc_7773x_firmware

amd/epyc_7643_firmware

amd/epyc_7573x_firmware

amd/epyc_75f3_firmware

amd/epyc_7543p_firmware

amd/epyc_7543_firmware

amd/epyc_7513_firmware

amd/epyc_7473x_firmware

amd/epyc_7453_firmware

... and 35 more

Timeline

Published Jan 11, 2024

Tracked Since Feb 18, 2026