Riskcovery

CVE-2023-20587

State
Published
Severity
7.1 High
Published
Feb 13, 2024
Updated
May 7, 2025
Reserved
Oct 27, 2022

Read the record on cve.org

Description

Improper Access Control in System Management Mode (SMM) may allow an attacker access to the SPI flash potentially leading to arbitrary code execution.

Scores

CVSSScoreVectorSource
3.17.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:NCISA-ADP

Weaknesses

Affected Products

ProductVersions
3rd Gen AMD EPYC™ ProcessorsAMD
  • various Affected
4th Gen AMD EPYC™ ProcessorsAMD
  • variousAffected
1st Gen AMD EPYC™ ProcessorsAMD
  • variousAffected
2nd Gen AMD EPYC™ ProcessorsAMD
  • variousAffected
AMD EPYC(TM) Embedded 3000AMD
  • variousAffected
AMD EPYC(TM) Embedded 7002AMD
  • variousAffected
AMD EPYC(TM) Embedded 7003AMD
  • variousAffected
AMD EPYC(TM) Embedded 9003AMD
  • variousAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.