Vulnerability Intelligence Report
CVE-2023-20593
An issue in “Zen 2” CPUs, under specific microarchitectural circumstances, may allow an attacker to potentially access sensitive information.
No Active Exploit Signals
CVSS Base Score
5.5
MEDIUM
EPSS Probability:5.79%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Weaknesses (CWE)
CWE-209 ↗CWE-209 Generation of Error Message Containing Sensitive Information
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| AMD | Ryzen™ 3000 Series Desktop Processors “Matisse” AM4 | various (affected) |
| AMD | AMD Ryzen™ 4000 Series Desktop Processors with Radeon™ Graphics “Renoir” AM4 | various (affected) |
| AMD | 3rd Gen AMD Ryzen™ Threadripper™ Processors “Castle Peak” HEDT | various (affected) |
| AMD | Ryzen™ Threadripper™ PRO Processors “Castle Peak” WS SP3 | various (affected) |
| AMD | Ryzen™ 5000 Series Mobile processors with Radeon™ Graphics “Lucienne” | various (affected) |
| AMD | Ryzen™ 4000 Series Mobile processors with Radeon™ Graphics “Renoir” | various (affected) |
| AMD | Ryzen™ 7020 Series processors “Mendocino” FT6 | various (affected) |
| AMD | 2nd Gen AMD EPYC™ Processors | various (affected) |
Threat Intelligence Signals
EPSS Score
5.794%
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | Advanced Micro Devices Inc. · Vendor · USA |
| Reserved | 2022-10-27T18:53:39 |
| Published | 2023-07-24T19:38:43 |
| Patch Date | 2023-07-24 |
| Last Updated | 2025-02-13T16:39:49 |
Community Chatter & Buzz