CVE-2023-31346 : Failure to initialize memory in SEV Firmware may allow a privileged attacker to

Failure to initialize memory in SEV Firmware may allow a privileged attacker to access stale data from other guests.

Published 2024-02-13 20:15:53

Updated 2025-03-20 21:15:19

Source Advanced Micro Devices Inc.

View at NVD, CVE.org

Products affected by CVE-2023-31346

AMD » Epyc 7763 Firmware
Versions before (<) milanpi_1.0.0.c
cpe:2.3:o:amd:epyc_7763_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7763 » Version: N/A
AMD » Epyc 7713p Firmware
Versions before (<) milanpi_1.0.0.c
cpe:2.3:o:amd:epyc_7713p_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7713p » Version: N/A
AMD » Epyc 7713 Firmware
Versions before (<) milanpi_1.0.0.c
cpe:2.3:o:amd:epyc_7713_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7713 » Version: N/A
AMD » Epyc 7663 Firmware
Versions before (<) milanpi_1.0.0.c
cpe:2.3:o:amd:epyc_7663_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7663 » Version: N/A
AMD » Epyc 7643 Firmware
Versions before (<) milanpi_1.0.0.c
cpe:2.3:o:amd:epyc_7643_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7643 » Version: N/A
AMD » Epyc 75f3 Firmware
Versions before (<) milanpi_1.0.0.c
cpe:2.3:o:amd:epyc_75f3_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 75f3 » Version: N/A
AMD » Epyc 7543p Firmware
Versions before (<) milanpi_1.0.0.c
cpe:2.3:o:amd:epyc_7543p_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7543p » Version: N/A
AMD » Epyc 7543 Firmware
Versions before (<) milanpi_1.0.0.c
cpe:2.3:o:amd:epyc_7543_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7543 » Version: N/A
AMD » Epyc 7513 Firmware
Versions before (<) milanpi_1.0.0.c
cpe:2.3:o:amd:epyc_7513_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7513 » Version: N/A
AMD » Epyc 7453 Firmware
Versions before (<) milanpi_1.0.0.c
cpe:2.3:o:amd:epyc_7453_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7453 » Version: N/A
AMD » Epyc 74f3 Firmware
Versions before (<) milanpi_1.0.0.c
cpe:2.3:o:amd:epyc_74f3_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 74f3 » Version: N/A
AMD » Epyc 7443p Firmware
Versions before (<) milanpi_1.0.0.c
cpe:2.3:o:amd:epyc_7443p_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7443p » Version: N/A
AMD » Epyc 7443 Firmware
Versions before (<) milanpi_1.0.0.c
cpe:2.3:o:amd:epyc_7443_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7443 » Version: N/A
AMD » Epyc 7413 Firmware
Versions before (<) milanpi_1.0.0.c
cpe:2.3:o:amd:epyc_7413_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7413 » Version: N/A
AMD » Epyc 73f3 Firmware
Versions before (<) milanpi_1.0.0.c
cpe:2.3:o:amd:epyc_73f3_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 73f3 » Version: N/A
AMD » Epyc 7343 Firmware
Versions before (<) milanpi_1.0.0.c
cpe:2.3:o:amd:epyc_7343_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7343 » Version: N/A
AMD » Epyc 7313p Firmware
Versions before (<) milanpi_1.0.0.c
cpe:2.3:o:amd:epyc_7313p_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7313p » Version: N/A
AMD » Epyc 7313 Firmware
Versions before (<) milanpi_1.0.0.c
cpe:2.3:o:amd:epyc_7313_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7313 » Version: N/A
AMD » Epyc 72f3 Firmware
Versions before (<) milanpi_1.0.0.c
cpe:2.3:o:amd:epyc_72f3_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 72f3 » Version: N/A
AMD » Epyc 7773x Firmware
Versions before (<) milanpi_1.0.0.c
cpe:2.3:o:amd:epyc_7773x_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7773x » Version: N/A
AMD » Epyc 7473x Firmware
Versions before (<) milanpi_1.0.0.c
cpe:2.3:o:amd:epyc_7473x_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7473x » Version: N/A
AMD » Epyc 7573x Firmware
Versions before (<) milanpi_1.0.0.c
cpe:2.3:o:amd:epyc_7573x_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7573x » Version: N/A
AMD » Epyc 7373x Firmware
Versions before (<) milanpi_1.0.0.c
cpe:2.3:o:amd:epyc_7373x_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7373x » Version: N/A
AMD » Epyc 9124 Firmware
Versions before (<) genoapi_1.0.0.b
cpe:2.3:o:amd:epyc_9124_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 9124 » Version: N/A
AMD » Epyc 9174f Firmware
Versions before (<) genoapi_1.0.0.b
cpe:2.3:o:amd:epyc_9174f_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 9174f » Version: N/A
AMD » Epyc 9184x Firmware
Versions before (<) genoapi_1.0.0.b
cpe:2.3:o:amd:epyc_9184x_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 9184x » Version: N/A
AMD » Epyc 9224 Firmware
Versions before (<) genoapi_1.0.0.b
cpe:2.3:o:amd:epyc_9224_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 9224 » Version: N/A
AMD » Epyc 9254 Firmware
Versions before (<) genoapi_1.0.0.b
cpe:2.3:o:amd:epyc_9254_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 9254 » Version: N/A
AMD » Epyc 9274f Firmware
Versions before (<) genoapi_1.0.0.b
cpe:2.3:o:amd:epyc_9274f_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 9274f » Version: N/A
AMD » Epyc 9334 Firmware
Versions before (<) genoapi_1.0.0.b
cpe:2.3:o:amd:epyc_9334_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 9334 » Version: N/A
AMD » Epyc 9354 Firmware
Versions before (<) genoapi_1.0.0.b
cpe:2.3:o:amd:epyc_9354_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 9354 » Version: N/A
AMD » Epyc 9354p Firmware
Versions before (<) genoapi_1.0.0.b
cpe:2.3:o:amd:epyc_9354p_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 9354p » Version: N/A
AMD » Epyc 9374f Firmware
Versions before (<) genoapi_1.0.0.b
cpe:2.3:o:amd:epyc_9374f_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 9374f » Version: N/A
AMD » Epyc 9384x Firmware
Versions before (<) genoapi_1.0.0.b
cpe:2.3:o:amd:epyc_9384x_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 9384x » Version: N/A
AMD » Epyc 9454 Firmware
Versions before (<) genoapi_1.0.0.b
cpe:2.3:o:amd:epyc_9454_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 9454 » Version: N/A
AMD » Epyc 9454p Firmware
Versions before (<) genoapi_1.0.0.b
cpe:2.3:o:amd:epyc_9454p_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 9454p » Version: N/A
AMD » Epyc 9474f Firmware
Versions before (<) genoapi_1.0.0.b
cpe:2.3:o:amd:epyc_9474f_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 9474f » Version: N/A
AMD » Epyc 9534 Firmware
Versions before (<) genoapi_1.0.0.b
cpe:2.3:o:amd:epyc_9534_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 9534 » Version: N/A
AMD » Epyc 9554p Firmware
Versions before (<) genoapi_1.0.0.b
cpe:2.3:o:amd:epyc_9554p_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 9554p » Version: N/A
AMD » Epyc 9554 Firmware
Versions before (<) genoapi_1.0.0.b
cpe:2.3:o:amd:epyc_9554_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 9554 » Version: N/A
AMD » Epyc 9634 Firmware
Versions before (<) genoapi_1.0.0.b
cpe:2.3:o:amd:epyc_9634_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 9634 » Version: N/A
AMD » Epyc 9654 Firmware
Versions before (<) genoapi_1.0.0.b
cpe:2.3:o:amd:epyc_9654_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 9654 » Version: N/A
AMD » Epyc 9654p Firmware
Versions before (<) genoapi_1.0.0.b
cpe:2.3:o:amd:epyc_9654p_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 9654p » Version: N/A
AMD » Epyc 9684x Firmware
Versions before (<) genoapi_1.0.0.b
cpe:2.3:o:amd:epyc_9684x_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 9684x » Version: N/A
AMD » Epyc 7203 Firmware
Versions before (<) milanpi_1.0.0.c
cpe:2.3:o:amd:epyc_7203_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 72f3 » Version: N/A
AMD » Epyc 7203p Firmware
Versions before (<) milanpi_1.0.0.c
cpe:2.3:o:amd:epyc_7203p_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7203p » Version: N/A
AMD » Epyc 7303 Firmware
Versions before (<) milanpi_1.0.0.c
cpe:2.3:o:amd:epyc_7303_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7303 » Version: N/A
AMD » Epyc 7303p Firmware
Versions before (<) milanpi_1.0.0.c
cpe:2.3:o:amd:epyc_7303p_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7303p » Version: N/A
AMD » Epyc 7643p Firmware
Versions before (<) milanpi_1.0.0.c
cpe:2.3:o:amd:epyc_7643p_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7643p » Version: N/A
AMD » Epyc 7663p Firmware
Versions before (<) milanpi_1.0.0.c
cpe:2.3:o:amd:epyc_7663p_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7663p » Version: N/A
AMD » Epyc 8024pn Firmware
Versions before (<) genoapi_1.0.0.b
cpe:2.3:o:amd:epyc_8024pn_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 8024pn » Version: N/A
AMD » Epyc 8024p Firmware
Versions before (<) genoapi_1.0.0.b
cpe:2.3:o:amd:epyc_8024p_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 8024p » Version: N/A
AMD » Epyc 8124pn Firmware
Versions before (<) genoapi_1.0.0.b
cpe:2.3:o:amd:epyc_8124pn_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 8124pn » Version: N/A
AMD » Epyc 8124p Firmware
Versions before (<) genoapi_1.0.0.b
cpe:2.3:o:amd:epyc_8124p_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 8124p » Version: N/A
AMD » Epyc 8224pn Firmware
Versions before (<) genoapi_1.0.0.b
cpe:2.3:o:amd:epyc_8224pn_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 8224pn » Version: N/A
AMD » Epyc 8224p Firmware
Versions before (<) genoapi_1.0.0.b
cpe:2.3:o:amd:epyc_8224p_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 8224p » Version: N/A
AMD » Epyc 8324pn Firmware
Versions before (<) genoapi_1.0.0.b
cpe:2.3:o:amd:epyc_8324pn_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 8324pn » Version: N/A
AMD » Epyc 8324p Firmware
Versions before (<) genoapi_1.0.0.b
cpe:2.3:o:amd:epyc_8324p_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 8324p » Version: N/A
AMD » Epyc 8434pn Firmware
Versions before (<) genoapi_1.0.0.b
cpe:2.3:o:amd:epyc_8434pn_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 8434pn » Version: N/A
AMD » Epyc 8434p Firmware
Versions before (<) genoapi_1.0.0.b
cpe:2.3:o:amd:epyc_8434p_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 8434p » Version: N/A
AMD » Epyc 8534pn Firmware
Versions before (<) genoapi_1.0.0.b
cpe:2.3:o:amd:epyc_8534pn_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 8534pn » Version: N/A
AMD » Epyc 8534p Firmware
Versions before (<) genoapi_1.0.0.b
cpe:2.3:o:amd:epyc_8534p_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 8534p » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2023-31346

EPSS FAQ

0.04%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 9 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2023-31346

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
6.0	MEDIUM	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N	1.5	4.0	134c704f-9b21-4f2e-91b3-4a467353bcc0	2025-03-20
Attack Vector: Local Attack Complexity: Low Privileges Required: High User Interaction: None Scope: Changed Confidentiality: High Integrity: None Availability: None
6.0	MEDIUM	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N	1.5	4.0	NIST	2024-10-24
Attack Vector: Local Attack Complexity: Low Privileges Required: High User Interaction: None Scope: Changed Confidentiality: High Integrity: None Availability: None

CWE ids for CVE-2023-31346

CWE-284 Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

Assigned by: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

References for CVE-2023-31346

https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3007

Page not found | AMD
Vendor Advisory

CVEs referencing this url

Jump to

Vulnerability Details : CVE-2023-31346

Products affected by CVE-2023-31346

Exploit prediction scoring system (EPSS) score for CVE-2023-31346

CVSS scores for CVE-2023-31346

CWE ids for CVE-2023-31346

References for CVE-2023-31346