Medium severity6.0NVD Advisory· Published Aug 5, 2024· Updated Jun 17, 2026
CVE-2023-31355
CVE-2023-31355
Description
Improper restriction of write operations in SNP firmware could allow a malicious hypervisor to overwrite a guest's UMC seed potentially allowing reading of memory from a decommissioned guest.
Affected products
91- AMD/AMD EPYC™ Embedded 7003v5Range: various
- AMD/AMD EPYC™ Embedded 9003v5Range: various
- cpe:2.3:o:amd:epyc_embedded_7313_firmware:*:*:*:*:*:*:*:*Range: <embmilanpi-sp3_1.0.0.9
- cpe:2.3:o:amd:epyc_embedded_7313p_firmware:*:*:*:*:*:*:*:*Range: <embmilanpi-sp3_1.0.0.9
- cpe:2.3:o:amd:epyc_embedded_7413_firmware:*:*:*:*:*:*:*:*Range: <embmilanpi-sp3_1.0.0.9
- cpe:2.3:o:amd:epyc_embedded_7443_firmware:*:*:*:*:*:*:*:*Range: <embmilanpi-sp3_1.0.0.9
- cpe:2.3:o:amd:epyc_embedded_7443p_firmware:*:*:*:*:*:*:*:*Range: <embmilanpi-sp3_1.0.0.9
- cpe:2.3:o:amd:epyc_embedded_7543_firmware:*:*:*:*:*:*:*:*Range: <embmilanpi-sp3_1.0.0.9
- cpe:2.3:o:amd:epyc_embedded_7543p_firmware:*:*:*:*:*:*:*:*Range: <embmilanpi-sp3_1.0.0.9
- cpe:2.3:o:amd:epyc_embedded_7643_firmware:*:*:*:*:*:*:*:*Range: <embmilanpi-sp3_1.0.0.9
- cpe:2.3:o:amd:epyc_embedded_7713_firmware:*:*:*:*:*:*:*:*Range: <embmilanpi-sp3_1.0.0.9
- cpe:2.3:o:amd:epyc_embedded_7713p_firmware:*:*:*:*:*:*:*:*Range: <embmilanpi-sp3_1.0.0.9
- cpe:2.3:o:amd:epyc_embedded_9124_firmware:*:*:*:*:*:*:*:*Range: <embgenoapi-sp5_1.0.0.7
- cpe:2.3:o:amd:epyc_embedded_9254_firmware:*:*:*:*:*:*:*:*Range: <embgenoapi-sp5_1.0.0.7
- cpe:2.3:o:amd:epyc_embedded_9354_firmware:*:*:*:*:*:*:*:*Range: <embgenoapi-sp5_1.0.0.7
- cpe:2.3:o:amd:epyc_embedded_9354p_firmware:*:*:*:*:*:*:*:*Range: <embgenoapi-sp5_1.0.0.7
- cpe:2.3:o:amd:epyc_embedded_9454_firmware:*:*:*:*:*:*:*:*Range: <embgenoapi-sp5_1.0.0.7
- cpe:2.3:o:amd:epyc_embedded_9454p_firmware:*:*:*:*:*:*:*:*Range: <embgenoapi-sp5_1.0.0.7
- cpe:2.3:o:amd:epyc_embedded_9534_firmware:*:*:*:*:*:*:*:*Range: <embgenoapi-sp5_1.0.0.7
- cpe:2.3:o:amd:epyc_embedded_9554_firmware:*:*:*:*:*:*:*:*Range: <embgenoapi-sp5_1.0.0.7
- cpe:2.3:o:amd:epyc_embedded_9554p_firmware:*:*:*:*:*:*:*:*Range: <embgenoapi-sp5_1.0.0.7
- cpe:2.3:o:amd:epyc_embedded_9654_firmware:*:*:*:*:*:*:*:*Range: <embgenoapi-sp5_1.0.0.7
- cpe:2.3:o:amd:epyc_embedded_9654p_firmware:*:*:*:*:*:*:*:*Range: <embgenoapi-sp5_1.0.0.7
various+ 1 more
- (no CPE)range: various
- (no CPE)range: various
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.