Severity
High
Analysis Summary
CVE-2022-23818
AMD EPYC Processors could allow a local authenticated attacker to execute arbitrary code on the system, caused by improper input validation on the model specific register: VM_HSAVE_PA. By sending a specially crafted request, an attacker could exploit this vulnerability to execute arbitrary code on the system.
Impact
- Code Execution
Indicators Of Compromise
CVE
- CVE-2022-23818
Affected Vendors
Amd
Affected Products
- AMD 3rd Generation EPYC
Remediation
Refer to AMD Security Advisory for patch, upgrade or suggested workaround information.