NetSight
medium4.4

CVE-2023-20594

Improper initialization of variables in the DXE driver may allow a privileged user to leak sensitive information via local access.

Impact

Improper initialization of variables in the DXE driver may allow a privileged user to leak sensitive information via local access.

Affected products

VendorProductAffected versions
AmdEpyc 7003 Firmware
Version milanpi_1.0.0.a
AmdEpyc 72f3 Firmware
Version milanpi_1.0.0.a
AmdEpyc 7313 Firmware
Version milanpi_1.0.0.a
AmdEpyc 7313p Firmware
Version milanpi_1.0.0.a
AmdEpyc 7343 Firmware
Version milanpi_1.0.0.a
AmdEpyc 7373x Firmware
Version milanpi_1.0.0.a
AmdEpyc 73f3 Firmware
Version milanpi_1.0.0.a
AmdEpyc 7443 Firmware
Version milanpi_1.0.0.a
AmdEpyc 7413 Firmware
Version milanpi_1.0.0.a
AmdEpyc 7443p Firmware
Version milanpi_1.0.0.a
AmdEpyc 7453 Firmware
Version milanpi_1.0.0.a
AmdEpyc 74f3 Firmware
Version milanpi_1.0.0.a

Weakness classification

References