Vulnerabilities > CVE-2023-20575 - Information Exposure Through Discrepancy vulnerability in AMD products

047910
CVSS 6.5 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
HIGH
Integrity impact
NONE
Availability impact
NONE
network
low complexity
amd
CWE-203

Summary

A potential power side-channel vulnerability in some AMD processors may allow an authenticated attacker to use the power reporting functionality to monitor a program’s execution inside an AMD SEV VM potentially resulting in a leak of sensitive information.

Vulnerable Configurations

Part Description Count
OS
Amd
88
Hardware
Amd
88

Common Weakness Enumeration (CWE)