CVE-2023-20521
TOCTOU in the ASP Bootloader may allow an attacker with physical access to tamper with SPI ROM records after memory content verification, potentially leading to loss of confidentiality or a denial of service.
- Score
- CVSS 3.1 5.7 Medium
- Status
- Modified - psirt@amd.com
- Published
- 2023-11-14
- Last modified
- 2024-08-02
- Weaknesses
- CWE-367
Affected products
- 1st Gen Amd Epyc Processors (Amd)
- 2nd Gen Amd Epyc Processors (Amd)
- 3rd Gen Amd Epyc Processors (Amd)
- Amd 3015ce Firmware (Amd)
- Amd 3015e Firmware (Amd)
- Amd Epyc Embedded 3000 (Amd)
- Amd Epyc Embedded 7002 (Amd)
- Amd Epyc Embedded 7003 (Amd)
- Amd Ryzen Embedded R1000 (Amd)
- Amd Ryzen Embedded R2000 (Amd)
- Amd Ryzen Embedded V1000 (Amd)
- Athlon 3000 Series Desktop Processors With Radeon Graphics Picasso Am4 (Amd)
- Athlon 3000 Series Mobile Processors With Radeon Graphics Dalidali Fp5 (Amd)
- Athlon 3000 Series Mobile Processors With Radeon Graphics Pollock (Amd)
- Athlon Gold 3150g Firmware (Amd)
- Athlon Gold Pro 3150g Firmware (Amd)
- Athlon Gold Pro 3150ge Firmware (Amd)
- Athlon Pro 300ge Firmware (Amd)
- Epyc 7001 Firmware (Amd)
- Epyc 7203 Firmware (Amd)
- Epyc 7203p Firmware (Amd)
- Epyc 7232p Firmware (Amd)
- Epyc 7251 Firmware (Amd)
- Epyc 7252 Firmware (Amd)
- Epyc 7261 Firmware (Amd)
- Epyc 7262 Firmware (Amd)
- Epyc 7272 Firmware (Amd)
- Epyc 7281 Firmware (Amd)
- Epyc 7282 Firmware (Amd)
- Epyc 72f3 Firmware (Amd)
- Epyc 7301 Firmware (Amd)
- Epyc 7302 Firmware (Amd)
- Epyc 7302p Firmware (Amd)
- Epyc 7303 Firmware (Amd)
- Epyc 7303p Firmware (Amd)
- Epyc 7313 Firmware (Amd)
- Epyc 7313p Firmware (Amd)
- Epyc 7343 Firmware (Amd)
- Epyc 7351 Firmware (Amd)
- Epyc 7351p Firmware (Amd)
- Epyc 7352 Firmware (Amd)
- Epyc 7371 Firmware (Amd)
- Epyc 7373x Firmware (Amd)
- Epyc 73f3 Firmware (Amd)
- Epyc 7401 Firmware (Amd)
- Epyc 7401p Firmware (Amd)
- Epyc 7402 Firmware (Amd)
- Epyc 7402p Firmware (Amd)
- Epyc 7413 Firmware (Amd)
- Epyc 7443 Firmware (Amd)
- Epyc 7443p Firmware (Amd)
- Epyc 7451 Firmware (Amd)
- Epyc 7452 Firmware (Amd)
- Epyc 7453 Firmware (Amd)
- Epyc 7473x Firmware (Amd)
- Epyc 74f3 Firmware (Amd)
- Epyc 7501 Firmware (Amd)
- Epyc 7502 Firmware (Amd)
- Epyc 7502p Firmware (Amd)
- Epyc 7513 Firmware (Amd)
- Epyc 7532 Firmware (Amd)
- Epyc 7542 Firmware (Amd)
- Epyc 7543 Firmware (Amd)
- Epyc 7543p Firmware (Amd)
- Epyc 7551 Firmware (Amd)
- Epyc 7551p Firmware (Amd)
- Epyc 7552 Firmware (Amd)
- Epyc 7573x Firmware (Amd)
- Epyc 75f3 Firmware (Amd)
- Epyc 7601 Firmware (Amd)
- Epyc 7642 Firmware (Amd)
- Epyc 7643 Firmware (Amd)
- Epyc 7643p Firmware (Amd)
- Epyc 7662 Firmware (Amd)
- Epyc 7663 Firmware (Amd)
- Epyc 7663p Firmware (Amd)
- Epyc 7702 Firmware (Amd)
- Epyc 7702p Firmware (Amd)
- Epyc 7713 Firmware (Amd)
- Epyc 7713p Firmware (Amd)
- Epyc 7742 Firmware (Amd)
- Epyc 7763 Firmware (Amd)
- Epyc 7773x Firmware (Amd)
- Epyc 7f32 Firmware (Amd)
- Epyc 7f52 Firmware (Amd)
- Epyc 7f72 Firmware (Amd)
- Epyc 7h12 Firmware (Amd)
- Ryzen 3000 Series Mobile Processor With Radeon Graphics Picasso Fp5 (Amd)
- Ryzen 3 3200u Firmware (Amd)
- Ryzen 3 3250c Firmware (Amd)
- Ryzen 3 3250u Firmware (Amd)
- Ryzen 3 3300u Firmware (Amd)
- Ryzen 3 3350u Firmware (Amd)
- Ryzen 5 3450u Firmware (Amd)
- Ryzen 5 3500c Firmware (Amd)
- Ryzen 5 3500u Firmware (Amd)
- Ryzen 5 3550h Firmware (Amd)
- Ryzen 5 3580u Firmware (Amd)
- Ryzen 7 3700c Firmware (Amd)
- Ryzen 7 3700u Firmware (Amd)
References
- https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3002
- https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4002
- https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-5001
