CVE-2023-20594: AMD Epyc 7003 Firmware

Medium severity, CVSS 4.4. EPSS: 0.2% chance of exploitation in the next 30 days.

Improper initialization of variables in the DXE driver may allow a privileged user to leak sensitive information via local access.

Affected products

• AMD Epyc 7003 Firmware: version milanpi_1.0.0.a only
• AMD Epyc 72f3 Firmware: version milanpi_1.0.0.a only
• AMD Epyc 7313 Firmware: version milanpi_1.0.0.a only
• AMD Epyc 7313p Firmware: version milanpi_1.0.0.a only
• AMD Epyc 7343 Firmware: version milanpi_1.0.0.a only
• AMD Epyc 7373x Firmware: version milanpi_1.0.0.a only
• AMD Epyc 73f3 Firmware: version milanpi_1.0.0.a only
• AMD Epyc 7413 Firmware: version milanpi_1.0.0.a only
• AMD Epyc 7443 Firmware: version milanpi_1.0.0.a only
• AMD Epyc 7443p Firmware: version milanpi_1.0.0.a only
• AMD Epyc 7453 Firmware: version milanpi_1.0.0.a only
• AMD Epyc 74f3 Firmware: version milanpi_1.0.0.a only
• AMD Epyc 7513 Firmware: version milanpi_1.0.0.a only
• AMD Epyc 7543 Firmware: version milanpi_1.0.0.a only
• AMD Epyc 7543p Firmware: version milanpi_1.0.0.a only
• AMD Epyc 7573x Firmware: version milanpi_1.0.0.a only
• AMD Epyc 75f3 Firmware: version milanpi_1.0.0.a only
• AMD Epyc 7643 Firmware: version milanpi_1.0.0.a only
• AMD Epyc 7663 Firmware: version milanpi_1.0.0.a only
• AMD Epyc 7713 Firmware: version milanpi_1.0.0.a only
• AMD Epyc 7713p Firmware: version milanpi_1.0.0.a only
• AMD Epyc 7743 Firmware: version milanpi_1.0.0.a only
• AMD Epyc 7763 Firmware: version milanpi_1.0.0.a only
• AMD Epyc 7773x Firmware: version milanpi_1.0.0.a only
• AMD Ryzen 3100 Firmware: version comboam4pi_1.0.0.9 only; version comboam4v2pi_1.2.0.8 only
• and 100 more

Published 2023-09-20. Last modified 2026-06-17.