{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2023-20584", "assignerOrgId": "b58fc414-a1e4-4f92-9d70-1add41838648", "state": "PUBLISHED", "assignerShortName": "AMD", "dateReserved": "2022-10-27T18:53:39.759Z", "datePublished": "2024-08-13T16:53:18.373Z", "dateUpdated": "2024-11-05T21:40:37.392Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "affected", "product": "AMD EPYC\u2122 7003 Processors", "vendor": "AMD", "versions": [{"status": "unaffected", "version": "MilanPI 1.0.0.C", "versionType": "PI"}]}, {"defaultStatus": "affected", "product": "AMD EPYC\u2122 9004 Processors", "vendor": "AMD", "versions": [{"status": "unaffected", "version": "GenoaPI 1.0.0.B"}]}], "datePublic": "2024-08-13T16:00:00.000Z", "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<span style=\"background-color: rgb(255, 255, 255);\">IOMMU improperly handles certain special address\nranges with invalid device table entries (DTEs), which may allow an attacker\nwith privileges and a compromised <a target=\"_blank\" rel=\"nofollow\">Hypervisor </a>to\ninduce DTE faults to bypass RMP checks in SEV-SNP, potentially leading to a\nloss of guest integrity.<div><div><div>\n\n</div>\n\n</div>\n\n</div>\n\n\n\n\n\n\n\n<div>\n\n\n\n\n\n<div>\n\n<div><a target=\"_blank\" rel=\"nofollow\"></a>\n\n<p><br></p></div></div><div><div>\n\n</div>\n\n</div>\n\n</div>\n\n\n\n\n\n<div><div><div>\n\n</div>\n\n</div>\n\n</div>\n\n\n\n\n\n</span>"}], "value": "IOMMU improperly handles certain special address\nranges with invalid device table entries (DTEs), which may allow an attacker\nwith privileges and a compromised Hypervisor to\ninduce DTE faults to bypass RMP checks in SEV-SNP, potentially leading to a\nloss of guest integrity."}], "metrics": [{"cvssV3_1": {"attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:N", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "providerMetadata": {"orgId": "b58fc414-a1e4-4f92-9d70-1add41838648", "shortName": "AMD", "dateUpdated": "2024-08-13T16:53:18.373Z"}, "references": [{"tags": ["vendor-advisory"], "url": "https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3003.html"}], "source": {"advisory": "AMD-SB-4002, AMD-SB-3002, AMD-SB-5001", "discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 0.1.0-dev"}}, "adp": [{"problemTypes": [{"descriptions": [{"type": "CWE", "lang": "en", "description": "CWE-noinfo Not enough information"}]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-08-13T17:31:27.946120Z", "id": "CVE-2023-20584", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-11-05T21:40:37.392Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2023-20584", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-08-13T17:31:27.946120Z"}}}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "description": "CWE-noinfo Not enough information"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-08-13T17:32:43.152Z"}}], "cna": {"source": {"advisory": "AMD-SB-4002, AMD-SB-3002, AMD-SB-5001", "discovery": "UNKNOWN"}, "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "HIGH", "confidentialityImpact": "NONE"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "AMD", "product": "AMD EPYC\u2122 7003 Processors", "versions": [{"status": "unaffected", "version": "MilanPI 1.0.0.C", "versionType": "PI"}], "defaultStatus": "affected"}, {"vendor": "AMD", "product": "AMD EPYC\u2122 9004 Processors", "versions": [{"status": "unaffected", "version": "GenoaPI 1.0.0.B"}], "defaultStatus": "affected"}], "datePublic": "2024-08-13T16:00:00.000Z", "references": [{"url": "https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3003.html", "tags": ["vendor-advisory"]}], "x_generator": {"engine": "Vulnogram 0.1.0-dev"}, "descriptions": [{"lang": "en", "value": "IOMMU improperly handles certain special address\nranges with invalid device table entries (DTEs), which may allow an attacker\nwith privileges and a compromised Hypervisor to\ninduce DTE faults to bypass RMP checks in SEV-SNP, potentially leading to a\nloss of guest integrity.", "supportingMedia": [{"type": "text/html", "value": "<span style=\"background-color: rgb(255, 255, 255);\">IOMMU improperly handles certain special address\nranges with invalid device table entries (DTEs), which may allow an attacker\nwith privileges and a compromised <a target=\"_blank\" rel=\"nofollow\">Hypervisor </a>to\ninduce DTE faults to bypass RMP checks in SEV-SNP, potentially leading to a\nloss of guest integrity.<div><div><div>\n\n</div>\n\n</div>\n\n</div>\n\n\n\n\n\n\n\n<div>\n\n\n\n\n\n<div>\n\n<div><a target=\"_blank\" rel=\"nofollow\"></a>\n\n<p><br></p></div></div><div><div>\n\n</div>\n\n</div>\n\n</div>\n\n\n\n\n\n<div><div><div>\n\n</div>\n\n</div>\n\n</div>\n\n\n\n\n\n</span>", "base64": false}]}], "providerMetadata": {"orgId": "b58fc414-a1e4-4f92-9d70-1add41838648", "shortName": "AMD", "dateUpdated": "2024-08-13T16:53:18.373Z"}}}, "cveMetadata": {"cveId": "CVE-2023-20584", "state": "PUBLISHED", "dateUpdated": "2024-11-05T21:40:37.392Z", "dateReserved": "2022-10-27T18:53:39.759Z", "assignerOrgId": "b58fc414-a1e4-4f92-9d70-1add41838648", "datePublished": "2024-08-13T16:53:18.373Z", "assignerShortName": "AMD"}, "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:amd:epyc_8024pn_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "C98F5728-3653-4F17-804A-B658C1195033", "versionEndExcluding": "genoapi_1.0.0.b", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:amd:epyc_8024pn:-:*:*:*:*:*:*:*", "matchCriteriaId": "364B9EAB-E113-4370-ACDC-92BFD54BEF88", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:amd:epyc_8024p_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "D4046AE4-F5D5-4B82-9E58-5970575E9908", "versionEndExcluding": "genoapi_1.0.0.b", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:amd:epyc_8024p:-:*:*:*:*:*:*:*", "matchCriteriaId": "29BACF50-D9DB-4207-BF61-CACDCC3870E9", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:amd:epyc_8124pn_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "ACBEB6E8-2D4A-4D15-91A6-F9C1A2572FDC", "versionEndExcluding": "genoapi_1.0.0.b", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:amd:epyc_8124pn:-:*:*:*:*:*:*:*", "matchCriteriaId": "B24580CA-3A31-4775-AD72-DF1DB6CB84C2", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:amd:epyc_8124p_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "030095CD-24D9-4033-A0C5-74C55083726D", "versionEndExcluding": "genoapi_1.0.0.b", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:amd:epyc_8124p:-:*:*:*:*:*:*:*", "matchCriteriaId": "E828D3FB-9EF3-40C4-B338-7BCF73C6EF37", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:amd:epyc_8224pn_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "CF4299D7-608D-4628-A8FE-DC0DBC09670F", "versionEndExcluding": "genoapi_1.0.0.b", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:amd:epyc_8224pn:-:*:*:*:*:*:*:*", "matchCriteriaId": "15981CBF-CB09-416E-AB31-54D650182EBD", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:amd:epyc_8224p_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "D7138757-214C-44E2-9873-9F00EAAFFBA7", "versionEndExcluding": "genoapi_1.0.0.b", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:amd:epyc_8224p:-:*:*:*:*:*:*:*", "matchCriteriaId": "DF4C36B4-CC5F-4A66-9294-71E0531E80F5", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:amd:epyc_8324pn_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "8E7978A2-777E-45D1-8036-7A4A72750AD8", "versionEndExcluding": "genoapi_1.0.0.b", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:amd:epyc_8324pn:-:*:*:*:*:*:*:*", "matchCriteriaId": "F4886768-DAFF-481E-894F-F8E816B36EB3", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:amd:epyc_8324p_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "A25A14B0-641D-4EAE-93C8-2ED73698BA70", "versionEndExcluding": "genoapi_1.0.0.b", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:amd:epyc_8324p:-:*:*:*:*:*:*:*", "matchCriteriaId": "46C7CC4B-3EC8-42D7-9AE9-F887D4DDF046", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:amd:epyc_8434pn_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "4406C0DB-2EA0-4307-B8D1-8CD59CD2D722", "versionEndExcluding": "genoapi_1.0.0.b", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:amd:epyc_8434pn:-:*:*:*:*:*:*:*", "matchCriteriaId": "A9241D42-1771-4528-8436-EE3FDE20C042", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:amd:epyc_8434p_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "08631494-65FE-4052-A572-AAA959DDC4A7", "versionEndExcluding": "genoapi_1.0.0.b", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:amd:epyc_8434p:-:*:*:*:*:*:*:*", "matchCriteriaId": "5323D02F-E25A-460D-8DA1-F8C72E635E53", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:amd:epyc_8534pn_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "52910ADE-A9DE-477A-95DE-F8842BDF8BCC", "versionEndExcluding": "genoapi_1.0.0.b", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:amd:epyc_8534pn:-:*:*:*:*:*:*:*", "matchCriteriaId": "9AF46284-ED2F-45F9-A4E8-221593FB7F49", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:amd:epyc_8534p_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "B4E7D4A0-5D38-4505-A272-03AAFA3C3904", "versionEndExcluding": "genoapi_1.0.0.b", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:amd:epyc_8534p:-:*:*:*:*:*:*:*", "matchCriteriaId": "DEABF567-1E41-4FD2-876E-7D2689A01D51", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:amd:epyc_9734_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "51A9A1EA-F6E1-496D-B406-24602D845392", "versionEndExcluding": "genoapi_1.0.0.b", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:amd:epyc_9734:-:*:*:*:*:*:*:*", "matchCriteriaId": "DE0954B5-9B6E-4C0E-905B-1E4B3FD50B04", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:amd:epyc_9754s_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "CFA9B863-5296-44E8-90FE-F07115B32D4A", "versionEndExcluding": "genoapi_1.0.0.b", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:amd:epyc_9754s:-:*:*:*:*:*:*:*", "matchCriteriaId": "E74F229A-FDBD-4C3D-BE0B-9193E6E560ED", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:amd:epyc_9754_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "4CAD221F-4A56-439B-A25C-E280792ACA60", "versionEndExcluding": "genoapi_1.0.0.b", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:amd:epyc_9754:-:*:*:*:*:*:*:*", "matchCriteriaId": "4EF0ED85-2FCF-4DCB-9C7F-0B5EC5EC574C", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:amd:epyc_9184x_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "C9FBE4F8-5043-4D9E-A263-17DA6BAE7DBB", "versionEndExcluding": "genoapi_1.0.0.b", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:amd:epyc_9184x:-:*:*:*:*:*:*:*", "matchCriteriaId": "4C3085B2-AFDA-4C34-A2B6-40D599F7E907", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:amd:epyc_9384x_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "FCDF1C52-B820-4F82-9E24-F460180D06F7", "versionEndExcluding": "genoapi_1.0.0.b", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:amd:epyc_9384x:-:*:*:*:*:*:*:*", "matchCriteriaId": "E6DC6F07-2E27-48C3-BD60-81496C2D3C62", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:amd:epyc_9684x_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "38B20E51-60E2-4309-A6F2-3F3F1F22B325", "versionEndExcluding": "genoapi_1.0.0.b", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:amd:epyc_9684x:-:*:*:*:*:*:*:*", "matchCriteriaId": "71A34603-6EB8-4D75-9391-8ADC35EA5EFE", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:amd:epyc_9124_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "D3F61F4E-9324-4CC9-B030-33A4B1F1982C", "versionEndExcluding": "genoapi_1.0.0.b", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:amd:epyc_9124:-:*:*:*:*:*:*:*", "matchCriteriaId": "2761489D-AABE-4ADD-AE5B-B26C4424F18A", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:amd:epyc_9174f_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "865C7A18-D151-4DEA-9279-6EE21CA02EBC", "versionEndExcluding": "genoapi_1.0.0.b", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:amd:epyc_9174f:-:*:*:*:*:*:*:*", "matchCriteriaId": "D7811418-4B63-4CCA-B81F-379FF0277673", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:amd:epyc_9224_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "2552E1CD-3D25-4A86-B435-8A2A4223AE35", "versionEndExcluding": "genoapi_1.0.0.b", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:amd:epyc_9224:-:*:*:*:*:*:*:*", "matchCriteriaId": "B085546F-4791-4096-A019-738A37353165", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:amd:epyc_9254_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "F3328406-7B6F-45E9-BAF0-AF46E87BA6A5", "versionEndExcluding": "genoapi_1.0.0.b", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:amd:epyc_9254:-:*:*:*:*:*:*:*", "matchCriteriaId": "AFDF951D-9B67-49CE-AD4A-B1052A484E65", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:amd:epyc_9274f_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "AC5B5271-0CE8-402F-95F6-3C5E3C6E9977", "versionEndExcluding": "genoapi_1.0.0.b", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:amd:epyc_9274f:-:*:*:*:*:*:*:*", "matchCriteriaId": "54EE0A4A-AA13-49CE-8825-407AD6B16B13", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:amd:epyc_9334_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "B1A672DC-A7F4-4115-907C-89570F552582", "versionEndExcluding": "genoapi_1.0.0.b", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:amd:epyc_9334:-:*:*:*:*:*:*:*", "matchCriteriaId": "6B1047C6-4627-4520-AFF7-5A0A623336F9", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:amd:epyc_9354_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "45F37CB5-08DB-4E7A-80B8-789FB445E8F7", "versionEndExcluding": "genoapi_1.0.0.b", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:amd:epyc_9354:-:*:*:*:*:*:*:*", "matchCriteriaId": "7A152B84-4935-4517-BD9D-37471C281BDA", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:amd:epyc_9354p_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "B5B71C11-5093-4CC8-8A73-5AA4F44E6FDB", "versionEndExcluding": "genoapi_1.0.0.b", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:amd:epyc_9354p:-:*:*:*:*:*:*:*", "matchCriteriaId": "EF0F7101-1B8B-454B-879F-8635CB16D5C7", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:amd:epyc_9374f_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "B3BA656D-90DC-41A5-9AC7-A3D94B7B1351", "versionEndExcluding": "genoapi_1.0.0.b", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:amd:epyc_9374f:-:*:*:*:*:*:*:*", "matchCriteriaId": "14BA8C50-B57A-4F6D-860B-790BD39249B0", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:amd:epyc_9454_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "705841B7-77D9-4FDB-8D71-1C0AD96FEAA7", "versionEndExcluding": "genoapi_1.0.0.b", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:amd:epyc_9454:-:*:*:*:*:*:*:*", "matchCriteriaId": "F7FDDC36-A96D-419F-A4B5-8AEF9D5FEBE5", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:amd:epyc_9454p_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "13F55ED1-AA9B-476E-AE54-630E8B28911A", "versionEndExcluding": "genoapi_1.0.0.b", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:amd:epyc_9454p:-:*:*:*:*:*:*:*", "matchCriteriaId": "932E47BF-3831-4D72-9F26-89CA591692B8", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:amd:epyc_9474f_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "CDD8CF52-1EF0-4718-8FE3-C83103BB2459", "versionEndExcluding": "genoapi_1.0.0.b", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:amd:epyc_9474f:-:*:*:*:*:*:*:*", "matchCriteriaId": "A1520823-129F-4F48-932B-1CA77D3446CC", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:amd:epyc_9534_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "608CCBAB-A934-4989-82BE-25042F0E5A57", "versionEndExcluding": "genoapi_1.0.0.b", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:amd:epyc_9534:-:*:*:*:*:*:*:*", "matchCriteriaId": "E8FC239C-6B12-4F7C-A725-9D66AD39F7F6", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:amd:epyc_9554_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "CAEA2412-28EC-4589-9B3F-78F451EF2048", "versionEndExcluding": "genoapi_1.0.0.b", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:amd:epyc_9554:-:*:*:*:*:*:*:*", "matchCriteriaId": "A95FCDE4-82EF-4C54-A85D-960B36A46DD0", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:amd:epyc_9554p_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "D7493D0B-1DB4-436E-A297-8F931C2EFBCC", "versionEndExcluding": "genoapi_1.0.0.b", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:amd:epyc_9554p:-:*:*:*:*:*:*:*", "matchCriteriaId": "A2BD9C75-AA02-47C1-94C7-BA5187B8CDF0", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:amd:epyc_9634_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "A5E762D7-9BBA-4DF9-B9DA-6EC62C303ECD", "versionEndExcluding": "genoapi_1.0.0.b", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:amd:epyc_9634:-:*:*:*:*:*:*:*", "matchCriteriaId": "4C6C0B65-0C8C-4BCE-9B40-39B2EB5E5EA5", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:amd:epyc_9654_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "BDCABE02-1723-4859-B863-805A7C37014B", "versionEndExcluding": "genoapi_1.0.0.b", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:amd:epyc_9654:-:*:*:*:*:*:*:*", "matchCriteriaId": "84209250-5078-4E8E-8532-98F652C12D79", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:amd:epyc_9654p_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "CECE4403-4C94-4CF0-983C-76720122738E", "versionEndExcluding": "genoapi_1.0.0.b", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:amd:epyc_9654p:-:*:*:*:*:*:*:*", "matchCriteriaId": "C150CC54-2F64-48E7-B996-F06247114BC4", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:amd:epyc_7203_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "B3AB732A-0FAD-46FB-994C-38A951F6F186", "versionEndExcluding": "milanpi_1.0.0.b", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:amd:epyc_7203:-:*:*:*:*:*:*:*", "matchCriteriaId": "F44C8195-1621-4327-BBFA-8AFA36BED7AA", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:amd:epyc_7203p_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "87E33F00-8FD4-4BA2-B33C-97DD8EAE658E", "versionEndExcluding": "milanpi_1.0.0.b", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:amd:epyc_7203p:-:*:*:*:*:*:*:*", "matchCriteriaId": "4A50B483-D20C-4BD4-94FA-01B8C9A904D5", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:amd:epyc_72f3_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "A1C8CBB1-EBF5-4339-B381-FB627CE1F6B9", "versionEndExcluding": "milanpi_1.0.0.b", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:amd:epyc_72f3:-:*:*:*:*:*:*:*", "matchCriteriaId": "7F98FF1A-3A2B-4CED-AEA2-9C4F2AC2D8C1", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:amd:epyc_7303_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "7F1B97E1-0559-44E0-B2D9-A03354700E9A", "versionEndExcluding": "milanpi_1.0.0.b", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:amd:epyc_7303:-:*:*:*:*:*:*:*", "matchCriteriaId": "EE26D1A9-79F1-48B0-854F-84421A261E5C", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:amd:epyc_7303p_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "83DD388C-713A-4790-8C28-F33DA972B559", "versionEndExcluding": "milanpi_1.0.0.b", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:amd:epyc_7303p:-:*:*:*:*:*:*:*", "matchCriteriaId": "88ACBFE2-C462-454E-9481-34BDF42237C8", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:amd:epyc_7313_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "1B3B6C95-72E5-4364-930B-75DE7011C9D1", "versionEndExcluding": "milanpi_1.0.0.b", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:amd:epyc_7313:-:*:*:*:*:*:*:*", "matchCriteriaId": "B02B61B7-7DD3-4164-8D32-EB961E981BC9", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:amd:epyc_7313p_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "62A5CA50-BFAB-4470-98CB-1478DD281960", "versionEndExcluding": "milanpi_1.0.0.b", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:amd:epyc_7313p:-:*:*:*:*:*:*:*", "matchCriteriaId": "9000686A-DC2B-4561-9C32-E90890EB2EBA", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:amd:epyc_7343_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "C647A92B-882A-432A-9CC3-7BFDCFF20F07", "versionEndExcluding": "milanpi_1.0.0.b", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:amd:epyc_7343:-:*:*:*:*:*:*:*", "matchCriteriaId": "71B9C24B-2C10-4826-A91B-E1C60665FBBE", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:amd:epyc_73f3_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "D71E8010-E3AE-4847-B20D-D4A94FE2E982", "versionEndExcluding": "milanpi_1.0.0.b", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:amd:epyc_73f3:-:*:*:*:*:*:*:*", "matchCriteriaId": "678C5F58-8AE9-46FF-8F01-4CF394C87A2C", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:amd:epyc_7373x_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "D0A0BC87-4F31-487E-8142-8B55F67D2261", "versionEndExcluding": "milanpi_1.0.0.b", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:amd:epyc_7373x:-:*:*:*:*:*:*:*", "matchCriteriaId": "180B3002-B3C5-48B5-8322-5B64B237C5B9", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:amd:epyc_7413_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "095CA571-847E-47F2-AD91-DFD2B1DE99FF", "versionEndExcluding": "milanpi_1.0.0.b", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:amd:epyc_7413:-:*:*:*:*:*:*:*", "matchCriteriaId": "D1766FF1-77A9-4293-B826-F6A8FBD7AFBF", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:amd:epyc_7443_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "0F7E9590-2921-4539-A88A-9031256141B8", "versionEndExcluding": "milanpi_1.0.0.b", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:amd:epyc_7443:-:*:*:*:*:*:*:*", "matchCriteriaId": "4C474537-3006-41BA-8C3D-5C370E3ACECD", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:amd:epyc_7443p_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "76ED00CB-FAEC-401F-BCE6-7505FC79052D", "versionEndExcluding": "milanpi_1.0.0.b", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:amd:epyc_7443p:-:*:*:*:*:*:*:*", "matchCriteriaId": "8E2B13CA-72F4-4CF6-9E12-62E6E9056A14", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:amd:epyc_74f3_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "FAF1298A-F225-4B9D-B3DB-B69ED9139FE1", "versionEndExcluding": "milanpi_1.0.0.b", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:amd:epyc_74f3:-:*:*:*:*:*:*:*", "matchCriteriaId": "02D08121-DC57-47D7-8214-23A209F0AF08", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:amd:epyc_7453_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "FCC7A394-F354-45AC-8DBE-84F6F1B8CD69", "versionEndExcluding": "milanpi_1.0.0.b", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:amd:epyc_7453:-:*:*:*:*:*:*:*", "matchCriteriaId": "241E39FF-FE66-444C-A4C2-3D28C45341BE", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:amd:epyc_7473x_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "273BB81D-1FB1-4656-B62A-1EAC317D1F0B", "versionEndExcluding": "milanpi_1.0.0.b", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:amd:epyc_7473x:-:*:*:*:*:*:*:*", "matchCriteriaId": "D07E922F-C1AB-469C-A1C1-9F9E58332DFC", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:amd:epyc_7513_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "C15272B3-8A7D-4BDE-B3D9-2A98A0C1EBD1", "versionEndExcluding": "milanpi_1.0.0.b", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:amd:epyc_7513:-:*:*:*:*:*:*:*", "matchCriteriaId": "F8264DF4-47B4-4716-AE89-44AFA870D385", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:amd:epyc_7543_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "14FE1816-DFCE-442B-9AF1-132F7E909445", "versionEndExcluding": "milanpi_1.0.0.b", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:amd:epyc_7543:-:*:*:*:*:*:*:*", "matchCriteriaId": "52544912-FAA3-4025-A5FD-151B21CEC53B", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:amd:epyc_7543p_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "71158ABF-441E-4A1B-8A59-EDF65DDD0F10", "versionEndExcluding": "milanpi_1.0.0.b", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:amd:epyc_7543p:-:*:*:*:*:*:*:*", "matchCriteriaId": "77A0A47B-74A1-4731-92A8-BC10FFE58ECF", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:amd:epyc_75f3_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "5427628C-6F24-4615-BD65-263EC4001E4A", "versionEndExcluding": "milanpi_1.0.0.b", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:amd:epyc_75f3:-:*:*:*:*:*:*:*", "matchCriteriaId": "EBF0AFED-588A-4EFB-8C90-9280BC3A6720", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:amd:epyc_7573x_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "25CCA953-04A4-4698-9985-FB97DA3EB536", "versionEndExcluding": "milanpi_1.0.0.b", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:amd:epyc_7573x:-:*:*:*:*:*:*:*", "matchCriteriaId": "237FB33B-BF08-4E3E-8E83-EB0AD2F12A4B", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:amd:epyc_7643_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "13E4D0A9-CF7D-41B0-B024-7D6726481280", "versionEndExcluding": "milanpi_1.0.0.b", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:amd:epyc_7643:-:*:*:*:*:*:*:*", "matchCriteriaId": "98E1D79D-0CB0-4FD9-8A82-27CDFBFE07B2", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:amd:epyc_7773x_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "E6937F59-A50E-4C4E-AA46-C2C7B692D7F5", "versionEndExcluding": "milanpi_1.0.0.b", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:amd:epyc_7773x:-:*:*:*:*:*:*:*", "matchCriteriaId": "D02B1C69-BAA4-485B-BE22-46BE321F9E4E", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:amd:epyc_7643p_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "9A499E19-B92C-4B89-84C5-8C66B42077E9", "versionEndExcluding": "milanpi_1.0.0.b", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:amd:epyc_7643p:-:*:*:*:*:*:*:*", "matchCriteriaId": "F05F9B7A-9777-461E-B88E-96592F87A49E", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:amd:epyc_7663_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "5D3BEE89-7D49-44C1-B608-940C453AC6A8", "versionEndExcluding": "milanpi_1.0.0.b", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:amd:epyc_7663:-:*:*:*:*:*:*:*", "matchCriteriaId": "A7DFCB62-6CDF-4AD2-9265-1887E5780CA5", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:amd:epyc_7663p_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "7A87082D-AEFA-401D-AEAA-E11DCB07DC62", "versionEndExcluding": "milanpi_1.0.0.b", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:amd:epyc_7663p:-:*:*:*:*:*:*:*", "matchCriteriaId": "B7B5F0D8-2659-494C-8FB9-50A797CE0CA9", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:amd:epyc_7713_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "8C5E0C31-BF05-4B92-ACA1-84071764E077", "versionEndExcluding": "milanpi_1.0.0.b", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:amd:epyc_7713:-:*:*:*:*:*:*:*", "matchCriteriaId": "4D698D3E-BB05-4C65-90F4-8DAE275CD6A4", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:amd:epyc_7713p_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "CF5BE306-1E32-4CD7-9B5A-27F7167937CC", "versionEndExcluding": "milanpi_1.0.0.b", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:amd:epyc_7713p:-:*:*:*:*:*:*:*", "matchCriteriaId": "2299ED50-B4D2-4BB3-AD87-56D552B84AE1", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:amd:epyc_7763_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "B1F02204-DC4A-4C35-B4E2-C8082516EBE5", "versionEndExcluding": "milanpi_1.0.0.b", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:amd:epyc_7763:-:*:*:*:*:*:*:*", "matchCriteriaId": "4F900BDD-F094-41A6-9A23-31F53DBA95D4", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "IOMMU improperly handles certain special address\nranges with invalid device table entries (DTEs), which may allow an attacker\nwith privileges and a compromised Hypervisor to\ninduce DTE faults to bypass RMP checks in SEV-SNP, potentially leading to a\nloss of guest integrity."}, {"lang": "es", "value": "IOMMU maneja incorrectamente ciertos rangos de direcciones especiales con entradas de tabla de dispositivos (DTE) no v\u00e1lidas, lo que puede permitir que un atacante con privilegios y un hipervisor comprometido induzca fallas de DTE para eludir las comprobaciones de RMP en SEV-SNP, lo que podr\u00eda provocar una p\u00e9rdida de integridad del hu\u00e9sped."}], "id": "CVE-2023-20584", "lastModified": "2024-12-12T20:29:14.730", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:N", "version": "3.1"}, "exploitabilityScore": 0.8, "impactScore": 4.0, "source": "psirt@amd.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 6.0, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:N", "version": "3.1"}, "exploitabilityScore": 1.5, "impactScore": 4.0, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2024-08-13T17:15:19.713", "references": [{"source": "psirt@amd.com", "tags": ["Vendor Advisory"], "url": "https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3003.html"}], "sourceIdentifier": "psirt@amd.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{"affected_release": [{"advisory": "RHSA-2024:7481", "cpe": "cpe:/o:redhat:enterprise_linux:8", "package": "linux-firmware-0:20240827-124.git3cff7109.el8_10", "product_name": "Red Hat Enterprise Linux 8", "release_date": "2024-10-02T00:00:00Z"}, {"advisory": "RHSA-2024:7418", "cpe": "cpe:/o:redhat:rhel_aus:8.6", "package": "linux-firmware-0:20240827-114.3.git3cff7109.el8_6", "product_name": "Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support", "release_date": "2024-10-01T00:00:00Z"}, {"advisory": "RHSA-2024:7418", "cpe": "cpe:/o:redhat:rhel_tus:8.6", "package": "linux-firmware-0:20240827-114.3.git3cff7109.el8_6", "product_name": "Red Hat Enterprise Linux 8.6 Telecommunications Update Service", "release_date": "2024-10-01T00:00:00Z"}, {"advisory": "RHSA-2024:7418", "cpe": "cpe:/o:redhat:rhel_e4s:8.6", "package": "linux-firmware-0:20240827-114.3.git3cff7109.el8_6", "product_name": "Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions", "release_date": "2024-10-01T00:00:00Z"}, {"advisory": "RHSA-2024:7484", "cpe": "cpe:/o:redhat:enterprise_linux:9", "package": "linux-firmware-0:20240905-143.3.el9_4", "product_name": "Red Hat Enterprise Linux 9", "release_date": "2024-10-02T00:00:00Z"}, {"advisory": "RHSA-2024:7483", "cpe": "cpe:/o:redhat:rhel_eus:9.2", "package": "linux-firmware-0:20240905-138.3.el9_2", "product_name": "Red Hat Enterprise Linux 9.2 Extended Update Support", "release_date": "2024-10-02T00:00:00Z"}], "bugzilla": {"description": "kernel: hw:amd:IOMMU improperly handles certain special address leading to a loss of guest integrity", "id": "2304583", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2304583"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.3", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:N", "status": "verified"}, "details": ["IOMMU improperly handles certain special address\nranges with invalid device table entries (DTEs), which may allow an attacker\nwith privileges and a compromised Hypervisor to\ninduce DTE faults to bypass RMP checks in SEV-SNP, potentially leading to a\nloss of guest integrity."], "mitigation": {"lang": "en:us", "value": "Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible."}, "name": "CVE-2023-20584", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "linux-firmware", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "linux-firmware", "product_name": "Red Hat Enterprise Linux 7"}], "public_date": "2024-08-13T12:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2023-20584\nhttps://nvd.nist.gov/vuln/detail/CVE-2023-20584\nhttps://www.amd.com/en/resources/product-security/bulletin/amd-sb-3003.html"], "threat_severity": "Moderate"}