CVEvulnerability
CVE-2023-20578
6.4 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2024-08-13
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
- CVSS 3.1 ([email protected])
- 6.4 MEDIUM — CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-367
Description
A TOCTOU (Time-Of-Check-Time-Of-Use) in SMM may allow
an attacker with ring0 privileges and access to the
BIOS menu or UEFI shell to modify the communications buffer potentially
resulting in arbitrary code execution.
Affected configurations
• amd epyc 8024pn firmware (< genoapi 1.0.0.2)
• amd epyc 8024p firmware (< genoapi 1.0.0.2)
• amd epyc 8124pn firmware (< genoapi 1.0.0.2)
• amd epyc 8124p firmware (< genoapi 1.0.0.2)
• amd epyc 8224pn firmware (< genoapi 1.0.0.2)
• amd epyc 8224p firmware (< genoapi 1.0.0.2)
• amd epyc 8324pn firmware (< genoapi 1.0.0.2)
• amd epyc 8324p firmware (< genoapi 1.0.0.2)
• amd epyc 8434pn firmware (< genoapi 1.0.0.2)
• amd epyc 8434p firmware (< genoapi 1.0.0.2)
• amd epyc 8534pn firmware (< genoapi 1.0.0.2)
• amd epyc 8534p firmware (< genoapi 1.0.0.2)
• amd epyc 9734 firmware (< genoapi 1.0.0.2)
• amd epyc 9754s firmware (< genoapi 1.0.0.2)
• amd epyc 9754 firmware (< genoapi 1.0.0.2)
• amd epyc 9184x firmware (< genoapi 1.0.0.2)
• amd epyc 9384x firmware (< genoapi 1.0.0.2)
• amd epyc 9684x firmware (< genoapi 1.0.0.2)
• amd epyc 9124 firmware (< genoapi 1.0.0.2)
• amd epyc 9174f firmware (< genoapi 1.0.0.2)
• amd epyc 9224 firmware (< genoapi 1.0.0.2)
• amd epyc 9254 firmware (< genoapi 1.0.0.2)
• amd epyc 9274f firmware (< genoapi 1.0.0.2)
• amd epyc 9334 firmware (< genoapi 1.0.0.2)
• amd epyc 9354 firmware (< genoapi 1.0.0.2)
• amd epyc 9354p firmware (< genoapi 1.0.0.2)
• amd epyc 9374f firmware (< genoapi 1.0.0.2)
• amd epyc 9454 firmware (< genoapi 1.0.0.2)
• amd epyc 9454p firmware (< genoapi 1.0.0.2)
• amd epyc 9474f firmware (< genoapi 1.0.0.2)
• amd epyc 9534 firmware (< genoapi 1.0.0.2)
• amd epyc 9554 firmware (< genoapi 1.0.0.2)
• amd epyc 9554p firmware (< genoapi 1.0.0.2)
• amd epyc 9634 firmware (< genoapi 1.0.0.2)
• amd epyc 9654 firmware (< genoapi 1.0.0.2)
• amd epyc 9654p firmware (< genoapi 1.0.0.2)
• amd epyc 7203 firmware (< milanpi 1.0.0.5)
• amd epyc 7203p firmware (< milanpi 1.0.0.5)
• amd epyc 72f3 firmware (< milanpi 1.0.0.5)
• amd epyc 7303 firmware (< milanpi 1.0.0.5)
• amd epyc 7303p firmware (< milanpi 1.0.0.5)
• amd epyc 7313 firmware (< milanpi 1.0.0.5)
• amd epyc 7313p firmware (< milanpi 1.0.0.5)
• amd epyc 7343 firmware (< milanpi 1.0.0.5)
• amd epyc 73f3 firmware (< milanpi 1.0.0.5)
• amd epyc 7373x firmware (< milanpi 1.0.0.5)
• amd epyc 7413 firmware (< milanpi 1.0.0.5)
• amd epyc 7443 firmware (< milanpi 1.0.0.5)
• amd epyc 7443p firmware (< milanpi 1.0.0.5)
• amd epyc 74f3 firmware (< milanpi 1.0.0.5)
• amd epyc 7453 firmware (< milanpi 1.0.0.5)
• amd epyc 7473x firmware (< milanpi 1.0.0.5)
• amd epyc 7513 firmware (< milanpi 1.0.0.5)
• amd epyc 7543 firmware (< milanpi 1.0.0.5)
• amd epyc 7543p firmware (< milanpi 1.0.0.5)
• amd epyc 75f3 firmware (< milanpi 1.0.0.5)
• amd epyc 7573x firmware (< milanpi 1.0.0.5)
• amd epyc 7643 firmware (< milanpi 1.0.0.5)
• amd epyc 7773x firmware (< milanpi 1.0.0.5)
• amd epyc 7643p firmware (< milanpi 1.0.0.5)
… and 45 more
Related
Weakness · CWE (1)
- CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition weakness