CVE-2023-20593

MEDIUM

Xen - Information Disclosure via Zen 2 CPU Microarchitectural Side Channel

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2023-20593. PoCs published by sbaresearch.

AI-analyzed exploit summary This repository provides a PowerShell script to mitigate CVE-2023-20593 (Zenbleed) on Windows by setting the DE_CFG[9] bit in the MSR CPU register using the WinRing0 driver. The script is a temporary workaround until AMD releases microcode updates.

Description

An issue in “Zen 2” CPUs, under specific microarchitectural circumstances, may allow an attacker to potentially access sensitive information.

Exploits (1)

nomisec WORKING POC 8 stars
by sbaresearch · poc
https://github.com/sbaresearch/stop-zenbleed-win

This repository provides a PowerShell script to mitigate CVE-2023-20593 (Zenbleed) on Windows by setting the DE_CFG[9] bit in the MSR CPU register using the WinRing0 driver. The script is a temporary workaround until AMD releases microcode updates.

Classification
Working Poc 95%
Attack Type
Other
Complexity
Moderate
Reliability
Reliable
Target: AMD Zen2 processors
Auth required
Prerequisites: Admin permissions · Hyper-V disabled · AMD Zen2 processor
mistral-large-3 · analyzed Feb 16, 2026 Full analysis →

References (35)

Core 35
Core References
Mailing List, Mitigation, Patch, Third Party Advisory
http://www.openwall.com/lists/oss-security/2023/07/26/1
Mailing List, Mitigation, Patch, Third Party Advisory
http://www.openwall.com/lists/oss-security/2023/07/31/2
Mitigation, Patch, Vendor Advisory
http://xenbits.xen.org/xsa/advisory-433.html

Scores

CVSS v3 5.5
EPSS 0.0579
EPSS Percentile 92.2%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact partial

Details

CWE
CWE-209
Status published
Products (50)
amd/athlon_gold_7220u_firmware
amd/epyc_7232p_firmware
amd/epyc_7252_firmware
amd/epyc_7262_firmware
amd/epyc_7272_firmware
amd/epyc_7282_firmware
amd/epyc_7302_firmware
amd/epyc_7302p_firmware
amd/epyc_7352_firmware
amd/epyc_7402_firmware
... and 40 more
Published Jul 24, 2023
Tracked Since Feb 18, 2026