PT-2023-17473 · Amd · Amd Epyc™ Embedded 7003+77

Published 2023-09-20 · Updated 2025-06-27 · CVE-2023-20597

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Insufficient information is provided to determine the specific software and versions affected.

Description The issue involves improper initialization of variables in the DXE driver, which may allow a privileged user to leak sensitive information via local access. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Initialization

Access of Uninitialized Pointer

Weakness Enumeration

CWE-665

CWE-824

Related Identifiers

CVE-2023-20597

Affected Products

Amd Epyc™ Embedded 7003

Amd Ryzen™ Embedded 5000

Amd Ryzen™ Embedded V2000

Amd Ryzen Embedded V3000

Ryzen™ 3000 Series Desktop Processors “Matisse”

Amd Ryzen™ 5000 Series Desktop Processor With Radeon™ Graphics

Ryzen™ 5000 Series Desktop Processors “Vermeer”

Ryzen™ 5000 Series Mobile Processors With Radeon™ Graphics “Cezanne”

Ryzen™ 6000 Series Mobile Processors With Radeon™ Graphics "Rembrandt"

Ryzen™ 7030 Series Mobile Processors With Radeon™ Graphics “Barcelo-R”

Amd Ryzen 7035 Series Processors With Radeon Graphics “Rembrandt-R”

Ryzen™ Threadripper™ 3000 Series Processors “Castle Peak” Hedt

Ryzen™ Threadripper™ Pro 3000Wx Series Processors “Chagall” Ws Sp3

Ryzen™ Threadripper™ Pro Processors “Castle Peak” Ws Sp3

Ryzen 3100 Firmware

Ryzen 3300X Firmware

Ryzen 3500X Firmware

Ryzen 3600 Firmware

Ryzen 3600Xt Firmware

Ryzen 3800Xt Firmware

Ryzen 3900 Firmware

Ryzen 3900Xt Firmware

Ryzen 3945Wx Firmware

Ryzen 3950X Firmware

Ryzen 3955Wx Firmware

Ryzen 3960X Firmware

Ryzen 3970X Firmware

Ryzen 3975Wx Firmware

Ryzen 3990X Firmware

Ryzen 3995Wx Firmware

Ryzen 3 3100 Firmware

Ryzen 3 3200G Firmware

Ryzen 3 3200Ge Firmware

Ryzen 3 3200U Firmware

Ryzen 3 3250U Firmware

Ryzen 3 3300X Firmware

Ryzen 3 3350U Firmware

Ryzen 3 3450U Firmware

Ryzen 3 3500C Firmware

Ryzen 3 3550H Firmware

Ryzen 3 3580U Firmware

Ryzen 3 3700C Firmware

Ryzen 3 3750H Firmware

Ryzen 3 3780U Firmware

Ryzen 4300G Firmware

Ryzen 4600G Firmware

Ryzen 4700S Firmware

Ryzen 5300Ge Firmware

Ryzen 5500 Firmware

Ryzen 5600Ge Firmware

Ryzen 5700Ge Firmware

Ryzen 5800X Firmware

Ryzen 5800X3D Firmware

Ryzen 5900X Firmware

Ryzen 5945Wx Firmware

Ryzen 5950X Firmware

Ryzen 5955Wx Firmware

Ryzen 5965Wx Firmware

Ryzen 5975Wx Firmware

Ryzen 5995Wx Firmware

Ryzen 5 5500 Firmware

Ryzen 5 5560U Firmware

Ryzen 5 5600X Firmware

Ryzen 5 5600X3D Firmware

Ryzen 5 5625U Firmware

Ryzen 5 5700G Firmware

Ryzen 6600U Firmware

Ryzen 6800U Firmware

Ryzen 6900Hx Firmware

Ryzen 6980Hx Firmware

Ryzen Threadripper 3960X Firmware

Ryzen Threadripper 3970X Firmware

Ryzen Threadripper 3990X Firmware

Ryzen Threadripper Pro 3795Wx Firmware

Ryzen Threadripper Pro 3945Wx Firmware

Ryzen Threadripper Pro 3955Wx Firmware

Ryzen Threadripper Pro 3975Wx Firmware

Ryzen Threadripper Pro 3995Wx Firmware

References · 9

• https://osv.dev/vulnerability/CVE-2023-20597 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-20597 · Security Note
• https://amd.com/en/corporate/product-security/bulletin/AMD-SB-4007 · Vendor Advisory
• https://t.me/cvenotify/126962 · Telegram Post
• https://t.me/cvenotify/58203 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1704601770838913025 · Twitter Post
• https://twitter.com/CVEnew/status/1704554173646123146 · Twitter Post
• https://t.me/cibsecurity/70831 · Telegram Post
• https://t.me/cvenotify/58476 · Telegram Post