cbcvebase.
CVE-2023-20594
published 2023-09-20

CVE-2023-20594: Improper initialization of variables in the DXE driver may allow a privileged user to leak sensitive information via local access.

PriorityP415medium4.4CVSS 3.1
AVLACLPRHUINSUCHINAN
EPSS
0.18%
7.2th percentile
Improper initialization of variables in the DXE driver may allow a privileged user to leak sensitive information via local access.

Affected

228 ranges· showing 25
VendorProductVersion rangeFixed in
amd3rd_gen_amd_epyc_processors——
amdepyc_7003_firmware——
amdepyc_72f3_firmware——
amdepyc_7313_firmware——
amdepyc_7313p_firmware——
amdepyc_7343_firmware——
amdepyc_7373x_firmware——
amdepyc_73f3_firmware——
amdepyc_7413_firmware——
amdepyc_7443_firmware——
amdepyc_7443p_firmware——
amdepyc_7453_firmware——
amdepyc_74f3_firmware——
amdepyc_7513_firmware——
amdepyc_7543_firmware——
amdepyc_7543p_firmware——
amdepyc_7573x_firmware——
amdepyc_75f3_firmware——
amdepyc_7643_firmware——
amdepyc_7663_firmware——
amdepyc_7713_firmware——
amdepyc_7713p_firmware——
amdepyc_7743_firmware——
amdepyc_7763_firmware——
amdepyc_7773x_firmware——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.