NetSight
medium4.9

CVE-2023-31347

Due to a code bug in Secure_TSC, SEV firmware may allow an attacker with high privileges to cause a guest to observe an incorrect TSC when Secure TSC is enable…

Impact

Due to a code bug in Secure_TSC, SEV firmware may allow an attacker with high privileges to cause a guest to observe an incorrect TSC when Secure TSC is enabled potentially resulting in a loss of guest integrity.  

Affected products

VendorProductAffected versions
AmdEpyc 7773x Firmware
before milanpi_1.0.0.c
AmdEpyc 7763 Firmware
before milanpi_1.0.0.c
AmdEpyc 7713 Firmware
before milanpi_1.0.0.c
AmdEpyc 7713p Firmware
All versions
AmdEpyc 7663 Firmware
before milanpi_1.0.0.c
AmdEpyc 7663p Firmware
before milanpi_1.0.0.c
AmdEpyc 7643 Firmware
before milanpi_1.0.0.c
AmdEpyc 7643p Firmware
before milanpi_1.0.0.c
AmdEpyc 7573x Firmware
before milanpi_1.0.0.c
AmdEpyc 75f3 Firmware
before milanpi_1.0.0.c
AmdEpyc 7543 Firmware
before milanpi_1.0.0.c
AmdEpyc 7543p Firmware
before milanpi_1.0.0.c

Weakness classification

References