CVE-2023-20593

CVE Enrichment

CVSS: 5.5 MEDIUM
EPSS: 5.19%
EPSS Percentile: 92.37%
CISA KEV: Not listed

Description

An issue in “Zen 2” CPUs, under specific microarchitectural circumstances, may allow an attacker to potentially access sensitive information.

Technical Details

CVSS Version: 3.1
CNA / NVD Source: psirt@amd.com
Published: 25-Jul-2023 03:15
Last Modified: 17-Jun-2026 12:30
EPSS Date: 2026-10-18
CWE: CWE-209

CVSS Vector


            CVSS:3.1                            AV:L /
                            AC:L /
                            PR:L /
                            UI:N /
                            S:U /
                            C:H /
                            I:N /
                            A:N

Affected Products / Versions

xen / xen
Version / affected range: 4.14.0
cpe:2.3:o:xen:xen:4.14.0:*:*:*:*:*:x86:*
xen / xen
Version / affected range: 4.15.0
cpe:2.3:o:xen:xen:4.15.0:*:*:*:*:*:x86:*
xen / xen
Version / affected range: 4.16.0
cpe:2.3:o:xen:xen:4.16.0:*:*:*:*:*:x86:*
xen / xen
Version / affected range: 4.17.0
cpe:2.3:o:xen:xen:4.17.0:*:*:*:*:*:x86:*
debian / debian_linux
Version / affected range: 10.0
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
debian / debian_linux
Version / affected range: 11.0
cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*
debian / debian_linux
Version / affected range: 12.0
cpe:2.3:o:debian:debian_linux:12.0:*:*:*:*:*:*:*
amd / ryzen_3_3100_firmware
Version / affected range: -
cpe:2.3:o:amd:ryzen_3_3100_firmware:-:*:*:*:*:*:*:*
amd / ryzen_3_3300x_firmware
Version / affected range: -
cpe:2.3:o:amd:ryzen_3_3300x_firmware:-:*:*:*:*:*:*:*
amd / ryzen_5_3500_firmware
Version / affected range: -
cpe:2.3:o:amd:ryzen_5_3500_firmware:-:*:*:*:*:*:*:*
amd / ryzen_5_3500x_firmware
Version / affected range: -
cpe:2.3:o:amd:ryzen_5_3500x_firmware:-:*:*:*:*:*:*:*
amd / ryzen_5_3600_firmware
Version / affected range: -
cpe:2.3:o:amd:ryzen_5_3600_firmware:-:*:*:*:*:*:*:*
amd / ryzen_5_3600x_firmware
Version / affected range: -
cpe:2.3:o:amd:ryzen_5_3600x_firmware:-:*:*:*:*:*:*:*
amd / ryzen_5_3600xt_firmware
Version / affected range: -
cpe:2.3:o:amd:ryzen_5_3600xt_firmware:-:*:*:*:*:*:*:*
amd / ryzen_7_3700x_firmware
Version / affected range: -
cpe:2.3:o:amd:ryzen_7_3700x_firmware:-:*:*:*:*:*:*:*
amd / ryzen_7_3800x_firmware
Version / affected range: -
cpe:2.3:o:amd:ryzen_7_3800x_firmware:-:*:*:*:*:*:*:*
amd / ryzen_7_3800xt_firmware
Version / affected range: -
cpe:2.3:o:amd:ryzen_7_3800xt_firmware:-:*:*:*:*:*:*:*
amd / ryzen_9_3900_firmware
Version / affected range: -
cpe:2.3:o:amd:ryzen_9_3900_firmware:-:*:*:*:*:*:*:*
amd / ryzen_9_3900x_firmware
Version / affected range: -
cpe:2.3:o:amd:ryzen_9_3900x_firmware:-:*:*:*:*:*:*:*
amd / ryzen_9_3900xt_firmware
Version / affected range: -
cpe:2.3:o:amd:ryzen_9_3900xt_firmware:-:*:*:*:*:*:*:*
amd / ryzen_9_3950x_firmware
Version / affected range: -
cpe:2.3:o:amd:ryzen_9_3950x_firmware:-:*:*:*:*:*:*:*
amd / ryzen_9_pro_3900_firmware
Version / affected range: -
cpe:2.3:o:amd:ryzen_9_pro_3900_firmware:-:*:*:*:*:*:*:*
amd / ryzen_threadripper_pro_3995wx_firmware
Version / affected range: -
cpe:2.3:o:amd:ryzen_threadripper_pro_3995wx_firmware:-:*:*:*:*:*:*:*
amd / ryzen_threadripper_pro_3975wx_firmware
Version / affected range: -
cpe:2.3:o:amd:ryzen_threadripper_pro_3975wx_firmware:-:*:*:*:*:*:*:*
amd / ryzen_threadripper_pro_3955wx_firmware
Version / affected range: -
cpe:2.3:o:amd:ryzen_threadripper_pro_3955wx_firmware:-:*:*:*:*:*:*:*
amd / ryzen_threadripper_pro_3945wx_firmware
Version / affected range: -
cpe:2.3:o:amd:ryzen_threadripper_pro_3945wx_firmware:-:*:*:*:*:*:*:*
amd / ryzen_threadripper_3990x_firmware
Version / affected range: -
cpe:2.3:o:amd:ryzen_threadripper_3990x_firmware:-:*:*:*:*:*:*:*
amd / ryzen_threadripper_3970x_firmware
Version / affected range: -
cpe:2.3:o:amd:ryzen_threadripper_3970x_firmware:-:*:*:*:*:*:*:*
amd / ryzen_threadripper_3960x_firmware
Version / affected range: -
cpe:2.3:o:amd:ryzen_threadripper_3960x_firmware:-:*:*:*:*:*:*:*
amd / ryzen_7_4700g_firmware
Version / affected range: -
cpe:2.3:o:amd:ryzen_7_4700g_firmware:-:*:*:*:*:*:*:*
amd / ryzen_7_4700ge_firmware
Version / affected range: -
cpe:2.3:o:amd:ryzen_7_4700ge_firmware:-:*:*:*:*:*:*:*
amd / ryzen_5_4600g_firmware
Version / affected range: -
cpe:2.3:o:amd:ryzen_5_4600g_firmware:-:*:*:*:*:*:*:*
amd / ryzen_5_4600ge_firmware
Version / affected range: -
cpe:2.3:o:amd:ryzen_5_4600ge_firmware:-:*:*:*:*:*:*:*
amd / ryzen_3_4300g_firmware
Version / affected range: -
cpe:2.3:o:amd:ryzen_3_4300g_firmware:-:*:*:*:*:*:*:*
amd / ryzen_3_4300ge_firmware
Version / affected range: -
cpe:2.3:o:amd:ryzen_3_4300ge_firmware:-:*:*:*:*:*:*:*
amd / ryzen_3_pro_4450u_firmware
Version / affected range: -
cpe:2.3:o:amd:ryzen_3_pro_4450u_firmware:-:*:*:*:*:*:*:*
amd / ryzen_3_pro_4350ge_firmware
Version / affected range: -
cpe:2.3:o:amd:ryzen_3_pro_4350ge_firmware:-:*:*:*:*:*:*:*
amd / ryzen_3_pro_4350g_firmware
Version / affected range: -
cpe:2.3:o:amd:ryzen_3_pro_4350g_firmware:-:*:*:*:*:*:*:*
amd / ryzen_3_pro_4200g_firmware
Version / affected range: -
cpe:2.3:o:amd:ryzen_3_pro_4200g_firmware:-:*:*:*:*:*:*:*
amd / ryzen_5_pro_4650ge_firmware
Version / affected range: -
cpe:2.3:o:amd:ryzen_5_pro_4650ge_firmware:-:*:*:*:*:*:*:*
amd / ryzen_5_pro_4650g_firmware
Version / affected range: -
cpe:2.3:o:amd:ryzen_5_pro_4650g_firmware:-:*:*:*:*:*:*:*
amd / ryzen_5_pro_4400g_firmware
Version / affected range: -
cpe:2.3:o:amd:ryzen_5_pro_4400g_firmware:-:*:*:*:*:*:*:*
amd / ryzen_7_pro_4750u_firmware
Version / affected range: -
cpe:2.3:o:amd:ryzen_7_pro_4750u_firmware:-:*:*:*:*:*:*:*
amd / ryzen_7_pro_4750ge_firmware
Version / affected range: -
cpe:2.3:o:amd:ryzen_7_pro_4750ge_firmware:-:*:*:*:*:*:*:*
amd / ryzen_7_pro_4750g_firmware
Version / affected range: -
cpe:2.3:o:amd:ryzen_7_pro_4750g_firmware:-:*:*:*:*:*:*:*
amd / ryzen_7_5700u_firmware
Version / affected range: -
cpe:2.3:o:amd:ryzen_7_5700u_firmware:-:*:*:*:*:*:*:*
amd / ryzen_5_5500u_firmware
Version / affected range: -
cpe:2.3:o:amd:ryzen_5_5500u_firmware:-:*:*:*:*:*:*:*
amd / ryzen_3_5300u_firmware
Version / affected range: -
cpe:2.3:o:amd:ryzen_3_5300u_firmware:-:*:*:*:*:*:*:*
amd / ryzen_5_7520u_firmware
Version / affected range: -
cpe:2.3:o:amd:ryzen_5_7520u_firmware:-:*:*:*:*:*:*:*
amd / ryzen_3_7320u_firmware
Version / affected range: -
cpe:2.3:o:amd:ryzen_3_7320u_firmware:-:*:*:*:*:*:*:*
amd / athlon_gold_7220u_firmware
Version / affected range: -
cpe:2.3:o:amd:athlon_gold_7220u_firmware:-:*:*:*:*:*:*:*
amd / epyc_7232p_firmware
Version / affected range: -
cpe:2.3:o:amd:epyc_7232p_firmware:-:*:*:*:*:*:*:*
amd / epyc_7302p_firmware
Version / affected range: -
cpe:2.3:o:amd:epyc_7302p_firmware:-:*:*:*:*:*:*:*
amd / epyc_7402p_firmware
Version / affected range: -
cpe:2.3:o:amd:epyc_7402p_firmware:-:*:*:*:*:*:*:*
amd / epyc_7502p_firmware
Version / affected range: -
cpe:2.3:o:amd:epyc_7502p_firmware:-:*:*:*:*:*:*:*
amd / epyc_7702p_firmware
Version / affected range: -
cpe:2.3:o:amd:epyc_7702p_firmware:-:*:*:*:*:*:*:*
amd / epyc_7252_firmware
Version / affected range: -
cpe:2.3:o:amd:epyc_7252_firmware:-:*:*:*:*:*:*:*
amd / epyc_7262_firmware
Version / affected range: -
cpe:2.3:o:amd:epyc_7262_firmware:-:*:*:*:*:*:*:*
amd / epyc_7272_firmware
Version / affected range: -
cpe:2.3:o:amd:epyc_7272_firmware:-:*:*:*:*:*:*:*
amd / epyc_7282_firmware
Version / affected range: -
cpe:2.3:o:amd:epyc_7282_firmware:-:*:*:*:*:*:*:*
amd / epyc_7302_firmware
Version / affected range: -
cpe:2.3:o:amd:epyc_7302_firmware:-:*:*:*:*:*:*:*
amd / epyc_7352_firmware
Version / affected range: -
cpe:2.3:o:amd:epyc_7352_firmware:-:*:*:*:*:*:*:*
amd / epyc_7402_firmware
Version / affected range: -
cpe:2.3:o:amd:epyc_7402_firmware:-:*:*:*:*:*:*:*
amd / epyc_7452_firmware
Version / affected range: -
cpe:2.3:o:amd:epyc_7452_firmware:-:*:*:*:*:*:*:*
amd / epyc_7502_firmware
Version / affected range: -
cpe:2.3:o:amd:epyc_7502_firmware:-:*:*:*:*:*:*:*
amd / epyc_7532_firmware
Version / affected range: -
cpe:2.3:o:amd:epyc_7532_firmware:-:*:*:*:*:*:*:*
amd / epyc_7542_firmware
Version / affected range: -
cpe:2.3:o:amd:epyc_7542_firmware:-:*:*:*:*:*:*:*
amd / epyc_7552_firmware
Version / affected range: -
cpe:2.3:o:amd:epyc_7552_firmware:-:*:*:*:*:*:*:*
amd / epyc_7642_firmware
Version / affected range: -
cpe:2.3:o:amd:epyc_7642_firmware:-:*:*:*:*:*:*:*
amd / epyc_7662_firmware
Version / affected range: -
cpe:2.3:o:amd:epyc_7662_firmware:-:*:*:*:*:*:*:*
amd / epyc_7702_firmware
Version / affected range: -
cpe:2.3:o:amd:epyc_7702_firmware:-:*:*:*:*:*:*:*
amd / epyc_7742_firmware
Version / affected range: -
cpe:2.3:o:amd:epyc_7742_firmware:-:*:*:*:*:*:*:*
amd / epyc_7h12_firmware
Version / affected range: -
cpe:2.3:o:amd:epyc_7h12_firmware:-:*:*:*:*:*:*:*
amd / epyc_7f32_firmware
Version / affected range: -
cpe:2.3:o:amd:epyc_7f32_firmware:-:*:*:*:*:*:*:*
amd / epyc_7f52_firmware
Version / affected range: -
cpe:2.3:o:amd:epyc_7f52_firmware:-:*:*:*:*:*:*:*
amd / epyc_7f72_firmware
Version / affected range: -
cpe:2.3:o:amd:epyc_7f72_firmware:-:*:*:*:*:*:*:*

References

Last enrichment sync: 19-Oct-2026 10:52
Sources: NVD · FIRST EPSS · CISA KEV
Latest successful provider update; providers refresh independently.

Reported Context (1)

What is CVE-2023-20593? Zenbleed Flaw Could Leak Data Across Processes on AMD Zen 2 CPUs

People (1)

MITRE ATT&CK (2)

Vendors (2)

Products (9)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.