CVE-2023-20526

Insufficient input validation in the ASP Bootloader may enable a privileged attacker with physical access to expose the contents of ASP memory potentially leading to a loss of confidentiality.

Score

CVSS 3.1 4.6 Medium

Status

Modified - psirt@amd.com

Published

2023-11-14

Last modified

2024-08-02

Affected products

• 1st Gen Amd Epyc Processors (Amd)
• 2nd Gen Amd Epyc Processors (Amd)
• 3rd Gen Amd Epyc Processors (Amd)
• Amd Epyc Embedded 3000 (Amd)
• Amd Epyc Embedded 7002 (Amd)
• Amd Epyc Embedded 7003 (Amd)
• Amd Ryzen Threadripper 2000 Series Processors Colfax (Amd)
• Epyc 7001 Firmware (Amd)
• Epyc 7203 Firmware (Amd)
• Epyc 7203p Firmware (Amd)
• Epyc 7232p Firmware (Amd)
• Epyc 7251 Firmware (Amd)
• Epyc 7252 Firmware (Amd)
• Epyc 7261 Firmware (Amd)
• Epyc 7262 Firmware (Amd)
• Epyc 7272 Firmware (Amd)
• Epyc 7281 Firmware (Amd)
• Epyc 7282 Firmware (Amd)
• Epyc 72f3 Firmware (Amd)
• Epyc 7301 Firmware (Amd)
• Epyc 7302 Firmware (Amd)
• Epyc 7302p Firmware (Amd)
• Epyc 7303 Firmware (Amd)
• Epyc 7303p Firmware (Amd)
• Epyc 7313 Firmware (Amd)
• Epyc 7313p Firmware (Amd)
• Epyc 7343 Firmware (Amd)
• Epyc 7351 Firmware (Amd)
• Epyc 7351p Firmware (Amd)
• Epyc 7352 Firmware (Amd)
• Epyc 7371 Firmware (Amd)
• Epyc 7373x Firmware (Amd)
• Epyc 73f3 Firmware (Amd)
• Epyc 7401 Firmware (Amd)
• Epyc 7401p Firmware (Amd)
• Epyc 7402 Firmware (Amd)
• Epyc 7402p Firmware (Amd)
• Epyc 7413 Firmware (Amd)
• Epyc 7443 Firmware (Amd)
• Epyc 7443p Firmware (Amd)
• Epyc 7451 Firmware (Amd)
• Epyc 7452 Firmware (Amd)
• Epyc 7453 Firmware (Amd)
• Epyc 7473x Firmware (Amd)
• Epyc 74f3 Firmware (Amd)
• Epyc 7501 Firmware (Amd)
• Epyc 7502 Firmware (Amd)
• Epyc 7502p Firmware (Amd)
• Epyc 7513 Firmware (Amd)
• Epyc 7532 Firmware (Amd)
• Epyc 7542 Firmware (Amd)
• Epyc 7543 Firmware (Amd)
• Epyc 7543p Firmware (Amd)
• Epyc 7551 Firmware (Amd)
• Epyc 7551p Firmware (Amd)
• Epyc 7552 Firmware (Amd)
• Epyc 7573x Firmware (Amd)
• Epyc 75f3 Firmware (Amd)
• Epyc 7601 Firmware (Amd)
• Epyc 7642 Firmware (Amd)
• Epyc 7643 Firmware (Amd)
• Epyc 7643p Firmware (Amd)
• Epyc 7662 Firmware (Amd)
• Epyc 7663 Firmware (Amd)
• Epyc 7663p Firmware (Amd)
• Epyc 7702 Firmware (Amd)
• Epyc 7702p Firmware (Amd)
• Epyc 7713 Firmware (Amd)
• Epyc 7713p Firmware (Amd)
• Epyc 7742 Firmware (Amd)
• Epyc 7763 Firmware (Amd)
• Epyc 7773x Firmware (Amd)
• Epyc 7f32 Firmware (Amd)
• Epyc 7f52 Firmware (Amd)
• Epyc 7f72 Firmware (Amd)
• Epyc 7h12 Firmware (Amd)
• Ryzen Threadripper 2920x Firmware (Amd)
• Ryzen Threadripper 2950x Firmware (Amd)
• Ryzen Threadripper 2970wx Firmware (Amd)
• Ryzen Threadripper 2990wx Firmware (Amd)

References

• https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3002
• https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4002
• https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-5001