CVE-2023-31355

{"id": "CVE-2023-31355", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "psirt@amd.com", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 6.0, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "impactScore": 4.0, "exploitabilityScore": 1.5}]}, "published": "2024-08-05T16:15:34.510", "references": [{"url": "https://https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3011.html", "source": "psirt@amd.com"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "psirt@amd.com", "description": [{"lang": "en", "value": "CWE-119"}]}], "descriptions": [{"lang": "en", "value": "Improper restriction of write operations in SNP firmware could allow a malicious hypervisor to overwrite a guest's UMC seed potentially allowing reading of memory from a decommissioned guest."}, {"lang": "es", "value": "Una restricci\u00f3n inadecuada de las operaciones de escritura en el firmware SNP podr\u00eda permitir que un hipervisor malicioso sobrescriba la semilla UMC de un invitado, lo que podr\u00eda permitir la lectura de la memoria de un invitado fuera de servicio."}], "lastModified": "2024-08-06T16:30:24.547", "sourceIdentifier": "psirt@amd.com"}