{"id":"CVE-2023-31355","aliases":["EUVD-2023-35666","GHSA-x6rx-7w39-qpg5"],"status":"published","title":"Improper restriction of write operations in SNP firmware could allow a malicious hypervisor to...","description":"Improper restriction of write operations in SNP firmware could allow a malicious hypervisor to overwrite a guest's UMC seed potentially allowing reading of memory from a decommissioned guest.","severity":{"version":"3.1","score":6,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00443,"percentile":0.38794,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-119","CWE-787"],"published":"2024-08-05T16:04:24Z","modified":"2026-06-17T05:56:50Z","exploits":[{"source":"pocgithub","id":"Freax13/cve-2023-31355-poc","title":"Freax13/cve-2023-31355-poc","date":"2023-12-08","url":"https://github.com/Freax13/cve-2023-31355-poc"}],"products":[{"vendor":"amd","product":"3rd gen amd epyc™ processors"},{"vendor":"amd","product":"4th gen amd epyc™ processors"},{"vendor":"amd","product":"amd epyc™ embedded 7003"},{"vendor":"amd","product":"amd epyc™ embedded 9003"},{"vendor":"amd","product":"epyc_7203_firmware"},{"vendor":"amd","product":"epyc_7203p_firmware"},{"vendor":"amd","product":"epyc_72f3_firmware"},{"vendor":"amd","product":"epyc_7303_firmware"},{"vendor":"amd","product":"epyc_7303p_firmware"},{"vendor":"amd","product":"epyc_7313_firmware"},{"vendor":"amd","product":"epyc_7313p_firmware"},{"vendor":"amd","product":"epyc_7343_firmware"},{"vendor":"amd","product":"epyc_7373x_firmware"},{"vendor":"amd","product":"epyc_73f3_firmware"},{"vendor":"amd","product":"epyc_7413_firmware"},{"vendor":"amd","product":"epyc_7443_firmware"},{"vendor":"amd","product":"epyc_7443p_firmware"},{"vendor":"amd","product":"epyc_7453_firmware"},{"vendor":"amd","product":"epyc_7473x_firmware"},{"vendor":"amd","product":"epyc_74f3_firmware"},{"vendor":"amd","product":"epyc_7513_firmware"},{"vendor":"amd","product":"epyc_7543_firmware"},{"vendor":"amd","product":"epyc_7543p_firmware"},{"vendor":"amd","product":"epyc_7573x_firmware"},{"vendor":"amd","product":"epyc_75f3_firmware"},{"vendor":"amd","product":"epyc_7643_firmware"},{"vendor":"amd","product":"epyc_7643p_firmware"},{"vendor":"amd","product":"epyc_7663_firmware"},{"vendor":"amd","product":"epyc_7663p_firmware"},{"vendor":"amd","product":"epyc_7713_firmware"},{"vendor":"amd","product":"epyc_7713p_firmware"},{"vendor":"amd","product":"epyc_7763_firmware"},{"vendor":"amd","product":"epyc_7773x_firmware"},{"vendor":"amd","product":"epyc_8024p_firmware"},{"vendor":"amd","product":"epyc_8024pn_firmware"},{"vendor":"amd","product":"epyc_8124p_firmware"},{"vendor":"amd","product":"epyc_8124pn_firmware"},{"vendor":"amd","product":"epyc_8224p_firmware"},{"vendor":"amd","product":"epyc_8224pn_firmware"},{"vendor":"amd","product":"epyc_8324p_firmware"},{"vendor":"amd","product":"epyc_8324pn_firmware"},{"vendor":"amd","product":"epyc_8434p_firmware"},{"vendor":"amd","product":"epyc_8434pn_firmware"},{"vendor":"amd","product":"epyc_8534p_firmware"},{"vendor":"amd","product":"epyc_8534pn_firmware"},{"vendor":"amd","product":"epyc_9124_firmware"},{"vendor":"amd","product":"epyc_9174f_firmware"},{"vendor":"amd","product":"epyc_9184x_firmware"},{"vendor":"amd","product":"epyc_9224_firmware"},{"vendor":"amd","product":"epyc_9254_firmware"},{"vendor":"amd","product":"epyc_9274f_firmware"},{"vendor":"amd","product":"epyc_9334_firmware"},{"vendor":"amd","product":"epyc_9354_firmware"},{"vendor":"amd","product":"epyc_9354p_firmware"},{"vendor":"amd","product":"epyc_9374f_firmware"},{"vendor":"amd","product":"epyc_9384x_firmware"},{"vendor":"amd","product":"epyc_9454_firmware"},{"vendor":"amd","product":"epyc_9454p_firmware"},{"vendor":"amd","product":"epyc_9474f_firmware"},{"vendor":"amd","product":"epyc_9534_firmware"},{"vendor":"amd","product":"epyc_9554_firmware"},{"vendor":"amd","product":"epyc_9554p_firmware"},{"vendor":"amd","product":"epyc_9634_firmware"},{"vendor":"amd","product":"epyc_9654_firmware"},{"vendor":"amd","product":"epyc_9654p_firmware"},{"vendor":"amd","product":"epyc_9684x_firmware"},{"vendor":"amd","product":"epyc_9734_firmware"},{"vendor":"amd","product":"epyc_9754_firmware"},{"vendor":"amd","product":"epyc_9754s_firmware"},{"vendor":"amd","product":"epyc_embedded_7313_firmware"},{"vendor":"amd","product":"epyc_embedded_7313p_firmware"},{"vendor":"amd","product":"epyc_embedded_7413_firmware"},{"vendor":"amd","product":"epyc_embedded_7443_firmware"},{"vendor":"amd","product":"epyc_embedded_7443p_firmware"},{"vendor":"amd","product":"epyc_embedded_7543_firmware"},{"vendor":"amd","product":"epyc_embedded_7543p_firmware"},{"vendor":"amd","product":"epyc_embedded_7643_firmware"},{"vendor":"amd","product":"epyc_embedded_7713_firmware"},{"vendor":"amd","product":"epyc_embedded_7713p_firmware"},{"vendor":"amd","product":"epyc_embedded_9124_firmware"},{"vendor":"amd","product":"epyc_embedded_9254_firmware"},{"vendor":"amd","product":"epyc_embedded_9354_firmware"},{"vendor":"amd","product":"epyc_embedded_9354p_firmware"},{"vendor":"amd","product":"epyc_embedded_9454_firmware"},{"vendor":"amd","product":"epyc_embedded_9454p_firmware"},{"vendor":"amd","product":"epyc_embedded_9534_firmware"},{"vendor":"amd","product":"epyc_embedded_9554_firmware"},{"vendor":"amd","product":"epyc_embedded_9554p_firmware"},{"vendor":"amd","product":"epyc_embedded_9654_firmware"},{"vendor":"amd","product":"epyc_embedded_9654p_firmware"}],"references":[{"url":"https://https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3011.html","tags":["vendor-advisory","Broken Link"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-31355"},{"url":"https://github.com/advisories/GHSA-x6rx-7w39-qpg5"}],"sources":{"cve":[{"id":"CVE-2023-31355","description":"Improper restriction of write operations in SNP firmware could allow a malicious hypervisor to overwrite a guest's UMC seed potentially allowing reading of memory from a decommissioned guest.","status":"published","published":"2024-08-05T16:04:24.813Z","modified":"2024-08-06T14:58:40.899Z","cvss":[{"version":"3.1","score":6,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:35:27.810438Z"}],"euvd":[{"id":"EUVD-2023-35666","description":"Improper restriction of write operations in SNP firmware could allow a malicious hypervisor to overwrite a guest's UMC seed potentially allowing reading of memory from a decommissioned guest.","status":"published","published":"2024-08-05T16:04:24Z","modified":"2024-08-06T14:58:40Z","cvss":[{"version":"3.1","score":6,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-03T01:56:42.411756Z"}],"ghsa":[{"id":"GHSA-x6rx-7w39-qpg5","title":"Improper restriction of write operations in SNP firmware could allow a malicious hypervisor to...","description":"Improper restriction of write operations in SNP firmware could allow a malicious hypervisor to overwrite a guest's UMC seed potentially allowing reading of memory from a decommissioned guest.","status":"published","published":"2024-08-05T18:31:43Z","modified":"2024-11-26T21:33:27Z","cvss":[{"version":"3.1","score":6,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-119","CWE-787"],"updated_at":"2026-11-02T14:58:58.77666Z"}],"nvd":[{"id":"CVE-2023-31355","description":"Improper restriction of write operations in SNP firmware could allow a malicious hypervisor to overwrite a guest's UMC seed potentially allowing reading of memory from a decommissioned guest.","status":"published","published":"2024-08-05T16:15:34.51Z","modified":"2026-06-17T05:56:50.49Z","cvss":[{"version":"3.1","score":6,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N","level":"medium","assessor":"secondary"},{"version":"3.1","score":6,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-119","CWE-787"],"updated_at":"2026-11-02T14:09:17.205287Z"}]}}