NetSight
medium6.5

CVE-2023-20575

A potential power side-channel vulnerability in some AMD processors may allow an authenticated attacker to use the power reporting functionality to monitor a p…

Impact

A potential power side-channel vulnerability in some AMD processors may allow an authenticated attacker to use the power reporting functionality to monitor a program’s execution inside an AMD SEV VM potentially resulting in a leak of sensitive information.

Affected products

VendorProductAffected versions
AmdEpyc 7251 Firmware
All versions
AmdEpyc 7281 Firmware
All versions
AmdEpyc 7301 Firmware
All versions
AmdEpyc 7351 Firmware
All versions
AmdEpyc 7351p Firmware
All versions
AmdEpyc 7401 Firmware
All versions
AmdEpyc 7401p Firmware
All versions
AmdEpyc 7451 Firmware
All versions
AmdEpyc 7501 Firmware
All versions
AmdEpyc 7551 Firmware
All versions
AmdEpyc 7551p Firmware
All versions
AmdEpyc 7601 Firmware
All versions

Weakness classification

References