CVE-2023-20573

lowpriority · track · 23EPSS 0.003 · 21 %ileexploit · PoCDEEURUUS

grimoire priorityP1 · Urgent

Exploitable?

Public exploit

1 exploit · PoC

Likely / severe?

0.29% (21st) EPSS

CVSS 3.2 · low

Is it mine?

70 products

Check your exposure

Who says so?

5 sources

cnnvd · enisa_euvd · fstec_bdu · cert_bund

EPSS · scored 2026-10-27

A privileged attacker can prevent delivery of debug exceptions to SEV-SNP guests potentially resulting in guests not receiving expected debug information.

cvss

Technical severity, 0–10. One row per scoring source.

3.2

010

base score 0–10 · higher = more severe · hover a vector to decode

v3.13.2lowCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:Nprimary · NVD / NIST USexploitability 1.5 · impact 1.4

v3.13.2lowAV:L/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:Nsecondary · FSTEC (BDU) RU

v3.13.2lowCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:Nsecondary · ENISA EU

v3.13.2lowCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:Nsecondaryexploitability 1.5 · impact 1.4

v3.13.1lowCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:N/E:Psecondary · CVSS-BT (t0sche)

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Trackcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-404USCWE-693US

exploits (1)

Public proof-of-concept and weaponised exploit code.

Freax13/cve-2023-20573-pocFreax13/cve-2023-20573-pocPoC · poc_in_github

affected products (70)

Products and version ranges known to be affected.

AMD Prozessorall versionscert_bundDEcpe:/h:amd:amd_processor:-
AMD 3rd Gen AMD EPYC™ Processorsall versionsenisa_euvdEU
AMD 4th Gen AMD EPYC™ Processorsall versionsenisa_euvdEU
Advanced Micro Devices Inc. 3rd Gen AMD EPYCall versionsfstec_bduRU
Advanced Micro Devices Inc. 4th Gen AMD EPYCall versionsfstec_bduRU
amd epyc 7203 firmwareall versionsnvdUScpe:2.3:o:amd:epyc_7203_firmware:*:*:*:*:*:*:*:*
amd epyc 7203p firmwareall versionsnvdUScpe:2.3:o:amd:epyc_7203p_firmware:*:*:*:*:*:*:*:*
amd epyc 72f3 firmwareall versionsnvdUScpe:2.3:o:amd:epyc_72f3_firmware:*:*:*:*:*:*:*:*
amd epyc 7303 firmwareall versionsnvdUScpe:2.3:o:amd:epyc_7303_firmware:*:*:*:*:*:*:*:*
amd epyc 7303p firmwareall versionsnvdUScpe:2.3:o:amd:epyc_7303p_firmware:*:*:*:*:*:*:*:*
amd epyc 7313 firmwareall versionsnvdUScpe:2.3:o:amd:epyc_7313_firmware:*:*:*:*:*:*:*:*
amd epyc 7313p firmwareall versionsnvdUScpe:2.3:o:amd:epyc_7313p_firmware:*:*:*:*:*:*:*:*
amd epyc 7343 firmwareall versionsnvdUScpe:2.3:o:amd:epyc_7343_firmware:*:*:*:*:*:*:*:*
amd epyc 7373x firmwareall versionsnvdUScpe:2.3:o:amd:epyc_7373x_firmware:*:*:*:*:*:*:*:*
amd epyc 73f3 firmwareall versionsnvdUScpe:2.3:o:amd:epyc_73f3_firmware:*:*:*:*:*:*:*:*
amd epyc 7413 firmwareall versionsnvdUScpe:2.3:o:amd:epyc_7413_firmware:*:*:*:*:*:*:*:*
amd epyc 7443 firmwareall versionsnvdUScpe:2.3:o:amd:epyc_7443_firmware:*:*:*:*:*:*:*:*
amd epyc 7443p firmwareall versionsnvdUScpe:2.3:o:amd:epyc_7443p_firmware:*:*:*:*:*:*:*:*
amd epyc 7453 firmwareall versionsnvdUScpe:2.3:o:amd:epyc_7453_firmware:*:*:*:*:*:*:*:*
amd epyc 7473x firmwareall versionsnvdUScpe:2.3:o:amd:epyc_7473x_firmware:*:*:*:*:*:*:*:*

showing 20 of 70

advisories (1)

Vendor and ecosystem advisories describing this.

WID-SEC-W-2024-0051AMD Prozessor: Schwachstelle ermöglicht Denial of ServiceDeutsch2024-01-09csaf · cert_bundDE
Ein entfernter, anonymer Angreifer kann eine Schwachstelle im AMD-Prozessor ausnutzen, um die Bereitstellung von Informationen zu verhindern.

also known as (5)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu cert_bund nvd NVD CVE.org MITRE

published 2024-01-11modified 2026-06-17

references (4)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan