CVEvulnerability

CVE-2023-20578

6.4 MEDIUM Published 2024-08-13 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2024-08-13
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
CVSS 3.1 ([email protected])
6.4 MEDIUM — CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-367

Description

A TOCTOU (Time-Of-Check-Time-Of-Use) in SMM may allow an attacker with ring0 privileges and access to the BIOS menu or UEFI shell to modify the communications buffer potentially resulting in arbitrary code execution.

Affected configurations

• amd epyc 8024pn firmware (< genoapi 1.0.0.2) • amd epyc 8024p firmware (< genoapi 1.0.0.2) • amd epyc 8124pn firmware (< genoapi 1.0.0.2) • amd epyc 8124p firmware (< genoapi 1.0.0.2) • amd epyc 8224pn firmware (< genoapi 1.0.0.2) • amd epyc 8224p firmware (< genoapi 1.0.0.2) • amd epyc 8324pn firmware (< genoapi 1.0.0.2) • amd epyc 8324p firmware (< genoapi 1.0.0.2) • amd epyc 8434pn firmware (< genoapi 1.0.0.2) • amd epyc 8434p firmware (< genoapi 1.0.0.2) • amd epyc 8534pn firmware (< genoapi 1.0.0.2) • amd epyc 8534p firmware (< genoapi 1.0.0.2) • amd epyc 9734 firmware (< genoapi 1.0.0.2) • amd epyc 9754s firmware (< genoapi 1.0.0.2) • amd epyc 9754 firmware (< genoapi 1.0.0.2) • amd epyc 9184x firmware (< genoapi 1.0.0.2) • amd epyc 9384x firmware (< genoapi 1.0.0.2) • amd epyc 9684x firmware (< genoapi 1.0.0.2) • amd epyc 9124 firmware (< genoapi 1.0.0.2) • amd epyc 9174f firmware (< genoapi 1.0.0.2) • amd epyc 9224 firmware (< genoapi 1.0.0.2) • amd epyc 9254 firmware (< genoapi 1.0.0.2) • amd epyc 9274f firmware (< genoapi 1.0.0.2) • amd epyc 9334 firmware (< genoapi 1.0.0.2) • amd epyc 9354 firmware (< genoapi 1.0.0.2) • amd epyc 9354p firmware (< genoapi 1.0.0.2) • amd epyc 9374f firmware (< genoapi 1.0.0.2) • amd epyc 9454 firmware (< genoapi 1.0.0.2) • amd epyc 9454p firmware (< genoapi 1.0.0.2) • amd epyc 9474f firmware (< genoapi 1.0.0.2) • amd epyc 9534 firmware (< genoapi 1.0.0.2) • amd epyc 9554 firmware (< genoapi 1.0.0.2) • amd epyc 9554p firmware (< genoapi 1.0.0.2) • amd epyc 9634 firmware (< genoapi 1.0.0.2) • amd epyc 9654 firmware (< genoapi 1.0.0.2) • amd epyc 9654p firmware (< genoapi 1.0.0.2) • amd epyc 7203 firmware (< milanpi 1.0.0.5) • amd epyc 7203p firmware (< milanpi 1.0.0.5) • amd epyc 72f3 firmware (< milanpi 1.0.0.5) • amd epyc 7303 firmware (< milanpi 1.0.0.5) • amd epyc 7303p firmware (< milanpi 1.0.0.5) • amd epyc 7313 firmware (< milanpi 1.0.0.5) • amd epyc 7313p firmware (< milanpi 1.0.0.5) • amd epyc 7343 firmware (< milanpi 1.0.0.5) • amd epyc 73f3 firmware (< milanpi 1.0.0.5) • amd epyc 7373x firmware (< milanpi 1.0.0.5) • amd epyc 7413 firmware (< milanpi 1.0.0.5) • amd epyc 7443 firmware (< milanpi 1.0.0.5) • amd epyc 7443p firmware (< milanpi 1.0.0.5) • amd epyc 74f3 firmware (< milanpi 1.0.0.5) • amd epyc 7453 firmware (< milanpi 1.0.0.5) • amd epyc 7473x firmware (< milanpi 1.0.0.5) • amd epyc 7513 firmware (< milanpi 1.0.0.5) • amd epyc 7543 firmware (< milanpi 1.0.0.5) • amd epyc 7543p firmware (< milanpi 1.0.0.5) • amd epyc 75f3 firmware (< milanpi 1.0.0.5) • amd epyc 7573x firmware (< milanpi 1.0.0.5) • amd epyc 7643 firmware (< milanpi 1.0.0.5) • amd epyc 7773x firmware (< milanpi 1.0.0.5) • amd epyc 7643p firmware (< milanpi 1.0.0.5) … and 45 more

Related

Weakness · CWE (1)

  • CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition weakness

References