CVE-2023-20533: High severity amd epyc 7232p firmware vulnerability
Insufficient DRAM address validation in System Management Unit (SMU) may allow an attacker to read/write from/to an invalid DRAM address, potentially resulting in denial-of-service.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-20533?
CVE-2023-20533 has a high severity due to its potential to enable denial-of-service conditions through unauthorized access to invalid DRAM addresses.
How do I fix CVE-2023-20533?
To mitigate CVE-2023-20533, users should update the firmware of affected AMD EPYC processors to the latest version provided by AMD.
Which AMD products are affected by CVE-2023-20533?
CVE-2023-20533 affects various AMD EPYC processor firmware versions prior to romepi_1.0.0.d and milanpi_1.0.0.5.
What are the potential impacts of CVE-2023-20533?
The potential impacts of CVE-2023-20533 include unauthorized memory access leading to data corruption and denial of service.
Is CVE-2023-20533 a remote vulnerability?
CVE-2023-20533 requires local access to the system for exploitation, making it less of a remote vulnerability.