CVE-2023-20520
—CVSS 3.1
9.8 critical
EPSS
<1%p54
Published
()
Modified
Description
Improper access control settings in ASP Bootloader may allow an attacker to corrupt the return address causing a stack-based buffer overrun potentially leading to arbitrary code execution.
- Vendors
- amd
- Products
- epyc 72f3 firmware, epyc 7313 firmware, epyc 7313p firmware, epyc 7343 firmware, epyc 7373x firmware, epyc 73f3 firmware, epyc 7413 firmware, epyc 7443 firmware, epyc 7443p firmware, epyc 7453 firmware, epyc 7473x firmware, epyc 74f3 firmware
- Weakness
- CWE-787
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
In the news0 stories
No ingested article mentions this CVE yet.