CVE-2023-20521
—CVSS 3.1
5.7 medium
EPSS
<1%p18
Published
()
Modified
Description
TOCTOU in the ASP Bootloader may allow an attacker with physical access to tamper with SPI ROM records after memory content verification, potentially leading to loss of confidentiality or a denial of service.
- Vendors
- amd
- Products
- epyc 7001 firmware, epyc 7251 firmware, epyc 7261 firmware, epyc 7281 firmware, epyc 7301 firmware, epyc 7351 firmware, epyc 7351p firmware, epyc 7371 firmware, epyc 7401 firmware, epyc 7401p firmware, epyc 7451 firmware, epyc 7501 firmware
- Weakness
- CWE-367
- Vector
- CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H
In the news0 stories
No ingested article mentions this CVE yet.