CVE-2023-20587

Improper Access Control in System Management Mode (SMM) may allow an attacker access to the SPI flash potentially leading to arbitrary code execution.

Score

CVSS 3.1 7.1 High

Status

Deferred - psirt@amd.com

Published

2024-02-13

Last modified

2025-05-07

Weaknesses

CWE-284

Affected products

• 1st Gen Amd Epyc Processors (Amd)
• 2nd Gen Amd Epyc Processors (Amd)
• 3rd Gen Amd Epyc Processors (Amd)
• 4th Gen Amd Epyc Processors (Amd)
• Amd Epyctm Embedded 3000 (Amd)
• Amd Epyctm Embedded 7002 (Amd)
• Amd Epyctm Embedded 7003 (Amd)
• Amd Epyctm Embedded 9003 (Amd)

References

• https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-7009