CVE-2023-20521
- State
- Published
- Severity
- 3.3 Low
- Published
- Nov 14, 2023
- Updated
- Aug 2, 2024
- Reserved
- Oct 27, 2022
Description
TOCTOU in the ASP Bootloader may allow an attacker with physical access to tamper with SPI ROM records after memory content verification, potentially leading to loss of confidentiality or a denial of service.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 3.3 Low | CVSS:3.1/AV:P/AC:H/PR:H/UI:N/S:C/C:L/I:N/A:L | AMD |
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics “Picasso” AM4AMD |
|
Ryzen™ Threadripper™ 2000 Series Processors “Colfax”AMD |
|
Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Dali”/”Dali” FP5AMD |
|
Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Pollock”AMD |
|
Ryzen™ 3000 Series Mobile Processor with Radeon™ Graphics “Picasso” FP5AMD |
|
1st Gen AMD EPYC™ ProcessorsAMD |
|
2nd Gen AMD EPYC™ ProcessorsAMD |
|
3rd Gen AMD EPYC™ ProcessorsAMD |
|
AMD EPYC™ Embedded 3000AMD |
|
AMD EPYC™ Embedded 7002AMD |
|
AMD EPYC™ Embedded 7003AMD |
|
AMD Ryzen™ Embedded R1000AMD |
|
AMD Ryzen™ Embedded R2000AMD |
|
AMD Ryzen™ Embedded V1000AMD |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.