How severe is CVE-2023-20591?

CVE-2023-20591 has a CVSS 3.x base score of 6.5, rated medium severity. It is exploitable over network with high attack complexity, requires no privileges and no user interaction. Impact on confidentiality is low, integrity low, and availability low.

Is CVE-2023-20591 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (22nd percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2023-20591?

CVE-2023-20591 primarily affects Amd Epyc 8024pn Firmware. In total, 65 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.

How do I fix CVE-2023-20591?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

Does CVE-2023-20591 have an EU (EUVD) identifier?

Yes. CVE-2023-20591 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2023-24770.

When was CVE-2023-20591 published?

CVE-2023-20591 was published on 2024-08-13 and last updated on 2026-06-17.

CVE-2023-20591

CVE-2023-20591 is a medium-severity vulnerability in Amd Epyc 8024pn Firmware with a CVSS 3.x base score of 6.5. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-665.

Key facts

Severity: Medium (CVSS 3.x base score 6.5)
EPSS exploit prediction: 0% (22nd percentile)
Actively exploited: Not listed in CISA KEV
EU (EUVD) id: EUVD-2023-24770
Weakness: CWE-665
Affected product: Amd Epyc 8024pn Firmware
Published: 2024-08-13
Last modified: 2026-06-17

Description

Improper re-initialization of IOMMU during the DRTM event may permit an untrusted platform configuration to persist, allowing an attacker to read or modify hypervisor memory, potentially resulting in loss of confidentiality, integrity, and availability.

Frequently asked questions

What is CVE-2023-20591?: Improper re-initialization of IOMMU during the DRTM event may permit an untrusted platform configuration to persist, allowing an attacker to read or modify hypervisor memory, potentially resulting in loss of confidentiality, integrity, and availability.
How severe is CVE-2023-20591?: CVE-2023-20591 has a CVSS 3.x base score of 6.5, rated medium severity. It is exploitable over network with high attack complexity, requires no privileges and no user interaction. Impact on confidentiality is low, integrity low, and availability low.
Is CVE-2023-20591 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (22nd percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2023-20591?: CVE-2023-20591 primarily affects Amd Epyc 8024pn Firmware. In total, 65 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
How do I fix CVE-2023-20591?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
Does CVE-2023-20591 have an EU (EUVD) identifier?: Yes. CVE-2023-20591 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2023-24770.
When was CVE-2023-20591 published?: CVE-2023-20591 was published on 2024-08-13 and last updated on 2026-06-17.

References

https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3003.html

Affected products (65)

cpe:2.3:o:amd:epyc_8024pn_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:amd:epyc_8024p_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:amd:epyc_8124pn_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:amd:epyc_8124p_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:amd:epyc_8224pn_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:amd:epyc_8224p_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:amd:epyc_8324pn_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:amd:epyc_8324p_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:amd:epyc_8434pn_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:amd:epyc_8434p_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:amd:epyc_8534pn_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:amd:epyc_8534p_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:amd:epyc_9734_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:amd:epyc_9754s_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:amd:epyc_9754_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:amd:epyc_9184x_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:amd:epyc_9384x_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:amd:epyc_9684x_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:amd:epyc_9124_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:amd:epyc_9174f_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:amd:epyc_9224_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:amd:epyc_9254_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:amd:epyc_9274f_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:amd:epyc_9334_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:amd:epyc_9354_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:amd:epyc_9354p_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:amd:epyc_9374f_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:amd:epyc_9454_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:amd:epyc_9454p_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:amd:epyc_9474f_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:amd:epyc_9534_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:amd:epyc_9554_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:amd:epyc_9554p_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:amd:epyc_9634_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:amd:epyc_9654_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:amd:epyc_9654p_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:amd:epyc_7203_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:amd:epyc_7203p_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:amd:epyc_72f3_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:amd:epyc_7303_firmware:*:*:*:*:*:*:*:*

More vulnerabilities in Amd Epyc 8024pn Firmware

CVE-2024-21980 — High (CVSS 7.9): Improper restriction of write operations in SNP firmware could allow a malicious hypervisor to potentially overwrite a…
CVE-2023-20578 — High (CVSS 7.5): A TOCTOU (Time-Of-Check-Time-Of-Use) in SMM may allow an attacker with ring0 privileges and access to the BIOS menu or…
CVE-2021-46774 — Medium (CVSS 6.7): Insufficient DRAM address validation in System Management Unit (SMU) may allow an attacker to read/write from/to an…
CVE-2024-21978 — Medium (CVSS 6.0): Improper input validation in SEV-SNP could allow a malicious hypervisor to read or overwrite guest memory potentially…
CVE-2023-31355 — Medium (CVSS 6.0): Improper restriction of write operations in SNP firmware could allow a malicious hypervisor to overwrite a guest's UMC…
CVE-2023-31346 — Medium (CVSS 6.0): Failure to initialize memory in SEV Firmware may allow a privileged attacker to access stale data from other guests.

All CVEs affecting Amd Epyc 8024pn Firmware →

Other CWE-665 (Improper Initialization) vulnerabilities

CVE-2021-33635 — Critical (CVSS 9.8): When malicious images are pulled by isula pull, attackers can execute arbitrary code.
CVE-2022-37128 — Critical (CVSS 9.8): In D-Link DIR-816 A2_v1.10CNB04.img the network can be initialized without authentication via /goform/wizard_end.
CVE-2021-41264 — Critical (CVSS 9.8): OpenZeppelin Contracts is a library for smart contract development. In affected versions upgradeable contracts using…
CVE-2019-10196 — Critical (CVSS 9.8): A flaw was found in http-proxy-agent, prior to version 2.1.0. It was discovered http-proxy-agent passes an auth option…
CVE-2015-8367 — Critical (CVSS 9.8): The phase_one_correct function in Libraw before 0.17.1 allows attackers to cause memory errors and possibly execute…
CVE-2019-14271 — Critical (CVSS 9.8): In Docker 19.03.x before 19.03.1 linked against the GNU C Library (aka glibc), code injection can occur when the…

Browse all CWE-665 (Improper Initialization) vulnerabilities →