← Back to KEV catalog

CVE-2023-31315

Exploitation: none CVSS 6.8 MEDIUM

CVSS base score: 6.8 (Medium) CISA · v3.1  ·  7.5 (High) vendor CNA · v3.1

Two scores are shown because both the vendor's CVE Numbering Authority (CNA) and CISA's Vulnrichment program scored this vulnerability independently — a gap between them reflects differing judgments, not an error.

Vendor: AMD   Product: 3rd Gen AMD EPYC™ Processors

Description

Improper validation in a model specific register (MSR) could allow a malicious program with ring0 access to modify SMM configuration while SMI lock is enabled, potentially leading to arbitrary code execution.

Lifecycle Timeline

Each milestone comes from a different source, so gaps between them are gaps in what those sources publish, not evidence that nothing happened. EPSS history for this CVE holds 122 points from 2024-08-17, tracked daily from 2026-09-09; earlier points are weekly, which dates a spike to within a week. Peak probability 0.7% on 2025-03-29.

Published Applicability

Red Hat CSAF/VEX 1 affected · 157 fixed · 24 not affected
CVE List v5 (CNA container) 21 affected · 0 fixed · 15 not affected
CVE List v5 (ADP/Vulnrichment) 29 affected · 0 fixed · 10 not affected

Check whether a specific version is affected →

What each source publishes about which product versions carry this vulnerability, kept as written rather than merged. Absence here means no source has published applicability data, not that nothing is affected.

Research & News Coverage

No mentions found in monitored research blogs or news feeds.

Detection & Exploitation

Exploit / Pen Test
none published
Network IDS/IPS
none published
Host / SIEM
none published

Coverage across public collections only: Nuclei and OpenVAS NVT (scan); Snort and Suricata ET Open (network); Sigma and YARA (host/SIEM); Metasploit, Exploit-DB and public GitHub repositories (exploit). Absence here means nothing public was found, not that detection is impossible.
GitHub PoC repositories are collected automatically by PoC-in-GitHub (CC0) and are not vetted: some are fakes and some are malware. Treat them as evidence that code was published, not as code to run.
OpenVAS coverage derives from the Greenbone Community Feed, made available under the Open Database License (ODbL) v1.0; its individual Vulnerability Tests are licensed GNU GPL v2.

Distribution Status

Debian · amd64-microcode bookworm 3.20240710.2~deb12u1 trixie 3.20240710.1 forky 3.20240710.1 sid 3.20240710.1 scope: local

Where the distribution has shipped a fix, and in which version. Green means the release has resolved it, amber that it is still open. Data from the Debian Security Tracker, used under Debian's MIT / GPLv2+ terms. Debian is upstream of several other distributions, so a fix here often precedes theirs.

CISA Assessment (Vulnrichment / SSVC)

none
no
total
6.8 MEDIUM
7.5 HIGH
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L
CWE-94 — Improper Control of Generation of Code ('Code Injection')
2024-08-27

D3FEND Countermeasures

Defensive techniques inferred by MITRE D3FEND from the underlying weakness (CWE-94) — general hardening and detection guidance for this weakness class, not a vendor patch for this specific CVE.

Listed By

SourceDateRecord
CISA Vulnrichment 2024-08-27 source record →

Referenced in Advisories

DateAdvisoryIssuer
2024-08-12 2024-075: Vulnerabilities in AMD CPUs CERT-EU

Weaponization Timeline — Offensive & Testing Tools

No exploit-tool sightings recorded for this CVE.

Evidence tiers are explained on the About page — a merged Metasploit module is far stronger evidence than a distro package mention.

External References