VULNERABILITY INTELLIGENCE

CVE-2023-20591

CVSS score6.5 MEDIUM
EPSS probability0.30%
CISA KEVNot currently listed
Published2024-08-13
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L

Description

Improper re-initialization of IOMMU during the DRTM event may permit an untrusted platform configuration to persist, allowing an attacker to read or modify hypervisor memory, potentially resulting in loss of confidentiality, integrity, and availability.

Weakness classification

  • nvd@nist.gov: CWE-665
  • 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-665

Primary references