CVE-2023-31355
Improper restriction of write operations in SNP firmware could allow a malicious hypervisor to...
Improper restriction of write operations in SNP firmware could allow a malicious hypervisor to overwrite a guest's UMC seed potentially allowing reading of memory from a decommissioned guest.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- High
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- None
- Availability
- None
Exploit likelihood
What each source reports
CVE List Score used
Improper restriction of write operations in SNP firmware could allow a malicious hypervisor to overwrite a guest's UMC seed potentially allowing reading of memory from a decommissioned guest.
- Record
CVE-2023-31355- CVSS 3.1
- 6.0 Medium
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N - Weakness
- CWE-119
- Updated
- 2026-11-02
EUVDEUVD-2023-35666
Improper restriction of write operations in SNP firmware could allow a malicious hypervisor to overwrite a guest's UMC seed potentially allowing reading of memory from a decommissioned guest.
- Record
EUVD-2023-35666- CVSS 3.1
- 6.0 Medium
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-x6rx-7w39-qpg5
Improper restriction of write operations in SNP firmware could allow a malicious hypervisor to...
Improper restriction of write operations in SNP firmware could allow a malicious hypervisor to overwrite a guest's UMC seed potentially allowing reading of memory from a decommissioned guest.
- Record
GHSA-x6rx-7w39-qpg5- CVSS 3.1
- 6.0 Medium
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N - Weakness
- CWE-119, CWE-787
- Updated
- 2026-11-02
NVD
Improper restriction of write operations in SNP firmware could allow a malicious hypervisor to overwrite a guest's UMC seed potentially allowing reading of memory from a decommissioned guest.
- Record
CVE-2023-31355- CVSS 3.1
- 6.0 Medium
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N - Weakness
- CWE-119, CWE-787
- Updated
- 2026-11-02
Affected products
- amd 3rd gen amd epyc™ processors
- amd 4th gen amd epyc™ processors
- amd epyc™ embedded 7003
- amd epyc™ embedded 9003
- amd epyc 7203 firmware
- amd epyc 7203p firmware
- amd epyc 72f3 firmware
- amd epyc 7303 firmware
- amd epyc 7303p firmware
- amd epyc 7313 firmware
- amd epyc 7313p firmware
- amd epyc 7343 firmware
Show 78 moreShow less
- amd epyc 7373x firmware
- amd epyc 73f3 firmware
- amd epyc 7413 firmware
- amd epyc 7443 firmware
- amd epyc 7443p firmware
- amd epyc 7453 firmware
- amd epyc 7473x firmware
- amd epyc 74f3 firmware
- amd epyc 7513 firmware
- amd epyc 7543 firmware
- amd epyc 7543p firmware
- amd epyc 7573x firmware
- amd epyc 75f3 firmware
- amd epyc 7643 firmware
- amd epyc 7643p firmware
- amd epyc 7663 firmware
- amd epyc 7663p firmware
- amd epyc 7713 firmware
- amd epyc 7713p firmware
- amd epyc 7763 firmware
- amd epyc 7773x firmware
- amd epyc 8024p firmware
- amd epyc 8024pn firmware
- amd epyc 8124p firmware
- amd epyc 8124pn firmware
- amd epyc 8224p firmware
- amd epyc 8224pn firmware
- amd epyc 8324p firmware
- amd epyc 8324pn firmware
- amd epyc 8434p firmware
- amd epyc 8434pn firmware
- amd epyc 8534p firmware
- amd epyc 8534pn firmware
- amd epyc 9124 firmware
- amd epyc 9174f firmware
- amd epyc 9184x firmware
- amd epyc 9224 firmware
- amd epyc 9254 firmware
- amd epyc 9274f firmware
- amd epyc 9334 firmware
- amd epyc 9354 firmware
- amd epyc 9354p firmware
- amd epyc 9374f firmware
- amd epyc 9384x firmware
- amd epyc 9454 firmware
- amd epyc 9454p firmware
- amd epyc 9474f firmware
- amd epyc 9534 firmware
- amd epyc 9554 firmware
- amd epyc 9554p firmware
- amd epyc 9634 firmware
- amd epyc 9654 firmware
- amd epyc 9654p firmware
- amd epyc 9684x firmware
- amd epyc 9734 firmware
- amd epyc 9754 firmware
- amd epyc 9754s firmware
- amd epyc embedded 7313 firmware
- amd epyc embedded 7313p firmware
- amd epyc embedded 7413 firmware
- amd epyc embedded 7443 firmware
- amd epyc embedded 7443p firmware
- amd epyc embedded 7543 firmware
- amd epyc embedded 7543p firmware
- amd epyc embedded 7643 firmware
- amd epyc embedded 7713 firmware
- amd epyc embedded 7713p firmware
- amd epyc embedded 9124 firmware
- amd epyc embedded 9254 firmware
- amd epyc embedded 9354 firmware
- amd epyc embedded 9354p firmware
- amd epyc embedded 9454 firmware
- amd epyc embedded 9454p firmware
- amd epyc embedded 9534 firmware
- amd epyc embedded 9554 firmware
- amd epyc embedded 9554p firmware
- amd epyc embedded 9654 firmware
- amd epyc embedded 9654p firmware
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| PoC in GitHub | Freax13/cve-2023-31355-poc | 2023-12-08 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases, published | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, PoC in GitHub |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2023-31355 is a medium vulnerability (CVSS 6.0) in Amd 3rd Gen Amd Epyc™ Processors, published August 5, 2024. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 0.44%, the 38th percentile. No source names a fixed version.