CVE Feed

    Dashboard / CVE / CVE-2023-20578

    CVE-2023-20578

    A TOCTOU (Time-Of-Check-Time-Of-Use) in SMM may allow an attacker with ring0 privileges and access to the BIOS menu or UEFI shell to modify the communications buffer potentially resulting in arbitrary code execution.

    Published:Aug 13, 2024
    Last Modified:Mar 18, 2025
    EPS:Aug 13, 2024
    EPSS Score:0.00022
    CVSS Score:7.5

    Affected Products

    Vendor
    Amd
    Product
    Epyc 7001
    Vendor
    Amd
    Product
    Epyc 7001 Firmware
    Vendor
    Amd
    Product
    Epyc 7002
    Vendor
    Amd
    Product
    Epyc 7203
    Vendor
    Amd
    Product
    Epyc 7203 Firmware
    Vendor
    Amd
    Product
    Epyc 7203p
    Vendor
    Amd
    Product
    Epyc 7203p Firmware
    Vendor
    Amd
    Product
    Epyc 7232p
    Vendor
    Amd
    Product
    Epyc 7232p Firmware
    Vendor
    Amd
    Product
    Epyc 7251
    Vendor
    Amd
    Product
    Epyc 7251 Firmware
    Vendor
    Amd
    Product
    Epyc 7252
    Vendor
    Amd
    Product
    Epyc 7252 Firmware
    Vendor
    Amd
    Product
    Epyc 7261
    Vendor
    Amd
    Product
    Epyc 7261 Firmware
    Vendor
    Amd
    Product
    Epyc 7262
    Vendor
    Amd
    Product
    Epyc 7262 Firmware
    Vendor
    Amd
    Product
    Epyc 7272
    Vendor
    Amd
    Product
    Epyc 7272 Firmware
    Vendor
    Amd
    Product
    Epyc 7281
    Vendor
    Amd
    Product
    Epyc 7281 Firmware
    Vendor
    Amd
    Product
    Epyc 7282
    Vendor
    Amd
    Product
    Epyc 7282 Firmware
    Vendor
    Amd
    Product
    Epyc 72f3
    Vendor
    Amd
    Product
    Epyc 72f3 Firmware
    Vendor
    Amd
    Product
    Epyc 7301
    Vendor
    Amd
    Product
    Epyc 7301 Firmware
    Vendor
    Amd
    Product
    Epyc 7302
    Vendor
    Amd
    Product
    Epyc 7302 Firmware
    Vendor
    Amd
    Product
    Epyc 7302p
    Vendor
    Amd
    Product
    Epyc 7302p Firmware
    Vendor
    Amd
    Product
    Epyc 7303
    Vendor
    Amd
    Product
    Epyc 7303 Firmware
    Vendor
    Amd
    Product
    Epyc 7303p
    Vendor
    Amd
    Product
    Epyc 7303p Firmware
    Vendor
    Amd
    Product
    Epyc 7313
    Vendor
    Amd
    Product
    Epyc 7313 Firmware
    Vendor
    Amd
    Product
    Epyc 7313p
    Vendor
    Amd
    Product
    Epyc 7313p Firmware
    Vendor
    Amd
    Product
    Epyc 7343
    Vendor
    Amd
    Product
    Epyc 7343 Firmware
    Vendor
    Amd
    Product
    Epyc 7351
    Vendor
    Amd
    Product
    Epyc 7351 Firmware
    Vendor
    Amd
    Product
    Epyc 7351p
    Vendor
    Amd
    Product
    Epyc 7351p Firmware
    Vendor
    Amd
    Product
    Epyc 7352
    Vendor
    Amd
    Product
    Epyc 7352 Firmware
    Vendor
    Amd
    Product
    Epyc 7371
    Vendor
    Amd
    Product
    Epyc 7371 Firmware
    Vendor
    Amd
    Product
    Epyc 7373x
    Vendor
    Amd
    Product
    Epyc 7373x Firmware
    Vendor
    Amd
    Product
    Epyc 73f3
    Vendor
    Amd
    Product
    Epyc 73f3 Firmware
    Vendor
    Amd
    Product
    Epyc 7401
    Vendor
    Amd
    Product
    Epyc 7401 Firmware
    Vendor
    Amd
    Product
    Epyc 7401p
    Vendor
    Amd
    Product
    Epyc 7401p Firmware
    Vendor
    Amd
    Product
    Epyc 7402
    Vendor
    Amd
    Product
    Epyc 7402 Firmware
    Vendor
    Amd
    Product
    Epyc 7402p
    Vendor
    Amd
    Product
    Epyc 7402p Firmware
    Vendor
    Amd
    Product
    Epyc 7413
    Vendor
    Amd
    Product
    Epyc 7413 Firmware
    Vendor
    Amd
    Product
    Epyc 7443
    Vendor
    Amd
    Product
    Epyc 7443 Firmware
    Vendor
    Amd
    Product
    Epyc 7443p
    Vendor
    Amd
    Product
    Epyc 7443p Firmware
    Vendor
    Amd
    Product
    Epyc 7451
    Vendor
    Amd
    Product
    Epyc 7451 Firmware
    Vendor
    Amd
    Product
    Epyc 7452
    Vendor
    Amd
    Product
    Epyc 7452 Firmware
    Vendor
    Amd
    Product
    Epyc 7453
    Vendor
    Amd
    Product
    Epyc 7453 Firmware
    Vendor
    Amd
    Product
    Epyc 7473x
    Vendor
    Amd
    Product
    Epyc 7473x Firmware
    Vendor
    Amd
    Product
    Epyc 74f3
    Vendor
    Amd
    Product
    Epyc 74f3 Firmware
    Vendor
    Amd
    Product
    Epyc 7501
    Vendor
    Amd
    Product
    Epyc 7501 Firmware
    Vendor
    Amd
    Product
    Epyc 7502
    Vendor
    Amd
    Product
    Epyc 7502 Firmware
    Vendor
    Amd
    Product
    Epyc 7502p
    Vendor
    Amd
    Product
    Epyc 7502p Firmware
    Vendor
    Amd
    Product
    Epyc 7513
    Vendor
    Amd
    Product
    Epyc 7513 Firmware
    Vendor
    Amd
    Product
    Epyc 7532
    Vendor
    Amd
    Product
    Epyc 7532 Firmware
    Vendor
    Amd
    Product
    Epyc 7542
    Vendor
    Amd
    Product
    Epyc 7542 Firmware
    Vendor
    Amd
    Product
    Epyc 7543
    Vendor
    Amd
    Product
    Epyc 7543 Firmware
    Vendor
    Amd
    Product
    Epyc 7543p
    Vendor
    Amd
    Product
    Epyc 7543p Firmware
    Vendor
    Amd
    Product
    Epyc 7551
    Vendor
    Amd
    Product
    Epyc 7551 Firmware
    Vendor
    Amd
    Product
    Epyc 7551p
    Vendor
    Amd
    Product
    Epyc 7551p Firmware
    Vendor
    Amd
    Product
    Epyc 7552
    Vendor
    Amd
    Product
    Epyc 7552 Firmware
    Vendor
    Amd
    Product
    Epyc 7573x
    Vendor
    Amd
    Product
    Epyc 7573x Firmware
    Vendor
    Amd
    Product
    Epyc 75f3
    Vendor
    Amd
    Product
    Epyc 75f3 Firmware
    Vendor
    Amd
    Product
    Epyc 7601
    Vendor
    Amd
    Product
    Epyc 7601 Firmware
    Vendor
    Amd
    Product
    Epyc 7642
    Vendor
    Amd
    Product
    Epyc 7642 Firmware
    Vendor
    Amd
    Product
    Epyc 7643
    Vendor
    Amd
    Product
    Epyc 7643 Firmware
    Vendor
    Amd
    Product
    Epyc 7643p
    Vendor
    Amd
    Product
    Epyc 7643p Firmware
    Vendor
    Amd
    Product
    Epyc 7662
    Vendor
    Amd
    Product
    Epyc 7662 Firmware
    Vendor
    Amd
    Product
    Epyc 7663
    Vendor
    Amd
    Product
    Epyc 7663 Firmware
    Vendor
    Amd
    Product
    Epyc 7663p
    Vendor
    Amd
    Product
    Epyc 7663p Firmware
    Vendor
    Amd
    Product
    Epyc 7702
    Vendor
    Amd
    Product
    Epyc 7702 Firmware
    Vendor
    Amd
    Product
    Epyc 7702p
    Vendor
    Amd
    Product
    Epyc 7702p Firmware
    Vendor
    Amd
    Product
    Epyc 7713
    Vendor
    Amd
    Product
    Epyc 7713 Firmware
    Vendor
    Amd
    Product
    Epyc 7713p
    Vendor
    Amd
    Product
    Epyc 7713p Firmware
    Vendor
    Amd
    Product
    Epyc 7742
    Vendor
    Amd
    Product
    Epyc 7742 Firmware
    Vendor
    Amd
    Product
    Epyc 7763
    Vendor
    Amd
    Product
    Epyc 7763 Firmware
    Vendor
    Amd
    Product
    Epyc 7773x
    Vendor
    Amd
    Product
    Epyc 7773x Firmware
    Vendor
    Amd
    Product
    Epyc 7f32
    Vendor
    Amd
    Product
    Epyc 7f32 Firmware
    Vendor
    Amd
    Product
    Epyc 7f52
    Vendor
    Amd
    Product
    Epyc 7f52 Firmware
    Vendor
    Amd
    Product
    Epyc 7f72
    Vendor
    Amd
    Product
    Epyc 7f72 Firmware
    Vendor
    Amd
    Product
    Epyc 7h12
    Vendor
    Amd
    Product
    Epyc 7h12 Firmware
    Vendor
    Amd
    Product
    Epyc 8024p
    Vendor
    Amd
    Product
    Epyc 8024p Firmware
    Vendor
    Amd
    Product
    Epyc 8024pn
    Vendor
    Amd
    Product
    Epyc 8024pn Firmware
    Vendor
    Amd
    Product
    Epyc 8124p
    Vendor
    Amd
    Product
    Epyc 8124p Firmware
    Vendor
    Amd
    Product
    Epyc 8124pn
    Vendor
    Amd
    Product
    Epyc 8124pn Firmware
    Vendor
    Amd
    Product
    Epyc 8224p
    Vendor
    Amd
    Product
    Epyc 8224p Firmware
    Vendor
    Amd
    Product
    Epyc 8224pn
    Vendor
    Amd
    Product
    Epyc 8224pn Firmware
    Vendor
    Amd
    Product
    Epyc 8324p
    Vendor
    Amd
    Product
    Epyc 8324p Firmware
    Vendor
    Amd
    Product
    Epyc 8324pn
    Vendor
    Amd
    Product
    Epyc 8324pn Firmware
    Vendor
    Amd
    Product
    Epyc 8434p
    Vendor
    Amd
    Product
    Epyc 8434p Firmware
    Vendor
    Amd
    Product
    Epyc 8434pn
    Vendor
    Amd
    Product
    Epyc 8434pn Firmware
    Vendor
    Amd
    Product
    Epyc 8534p
    Vendor
    Amd
    Product
    Epyc 8534p Firmware
    Vendor
    Amd
    Product
    Epyc 8534pn
    Vendor
    Amd
    Product
    Epyc 8534pn Firmware
    Vendor
    Amd
    Product
    Epyc 9004
    Vendor
    Amd
    Product
    Epyc 9124
    Vendor
    Amd
    Product
    Epyc 9124 Firmware
    Vendor
    Amd
    Product
    Epyc 9174f
    Vendor
    Amd
    Product
    Epyc 9174f Firmware
    Vendor
    Amd
    Product
    Epyc 9184x
    Vendor
    Amd
    Product
    Epyc 9184x Firmware
    Vendor
    Amd
    Product
    Epyc 9224
    Vendor
    Amd
    Product
    Epyc 9224 Firmware
    Vendor
    Amd
    Product
    Epyc 9254
    Vendor
    Amd
    Product
    Epyc 9254 Firmware
    Vendor
    Amd
    Product
    Epyc 9274f
    Vendor
    Amd
    Product
    Epyc 9274f Firmware
    Vendor
    Amd
    Product
    Epyc 9334
    Vendor
    Amd
    Product
    Epyc 9334 Firmware
    Vendor
    Amd
    Product
    Epyc 9354
    Vendor
    Amd
    Product
    Epyc 9354 Firmware
    Vendor
    Amd
    Product
    Epyc 9354p
    Vendor
    Amd
    Product
    Epyc 9354p Firmware
    Vendor
    Amd
    Product
    Epyc 9374f
    Vendor
    Amd
    Product
    Epyc 9374f Firmware
    Vendor
    Amd
    Product
    Epyc 9384x
    Vendor
    Amd
    Product
    Epyc 9384x Firmware
    Vendor
    Amd
    Product
    Epyc 9454
    Vendor
    Amd
    Product
    Epyc 9454 Firmware
    Vendor
    Amd
    Product
    Epyc 9454p
    Vendor
    Amd
    Product
    Epyc 9454p Firmware
    Vendor
    Amd
    Product
    Epyc 9474f
    Vendor
    Amd
    Product
    Epyc 9474f Firmware
    Vendor
    Amd
    Product
    Epyc 9534
    Vendor
    Amd
    Product
    Epyc 9534 Firmware
    Vendor
    Amd
    Product
    Epyc 9554
    Vendor
    Amd
    Product
    Epyc 9554 Firmware
    Vendor
    Amd
    Product
    Epyc 9554p
    Vendor
    Amd
    Product
    Epyc 9554p Firmware
    Vendor
    Amd
    Product
    Epyc 9634
    Vendor
    Amd
    Product
    Epyc 9634 Firmware
    Vendor
    Amd
    Product
    Epyc 9654
    Vendor
    Amd
    Product
    Epyc 9654 Firmware
    Vendor
    Amd
    Product
    Epyc 9654p
    Vendor
    Amd
    Product
    Epyc 9654p Firmware
    Vendor
    Amd
    Product
    Epyc 9684x
    Vendor
    Amd
    Product
    Epyc 9684x Firmware
    Vendor
    Amd
    Product
    Epyc 9734
    Vendor
    Amd
    Product
    Epyc 9734 Firmware
    Vendor
    Amd
    Product
    Epyc 9754
    Vendor
    Amd
    Product
    Epyc 9754 Firmware
    Vendor
    Amd
    Product
    Epyc 9754s
    Vendor
    Amd
    Product
    Epyc 9754s Firmware
    Vendor
    Amd
    Product
    Epyc Embedded 3000
    Vendor
    Amd
    Product
    Epyc Embedded 7002
    Vendor
    Amd
    Product
    Epyc Embedded 7003
    Vendor
    Amd
    Product
    Epyc Embedded 9003
    Vendor
    Amd
    Product
    Ryzen Embedded 7000
    Vendor
    Amd
    Product
    Ryzen Embedded V3000

    Exploits

    No exploit reference

    Related CVEs

    CVE-2024-36354 (CVSS 7.5) — Improper input validation for DIMM serial presence detect (SPD) metadata could allow an attacker with physical…
    CVE-2021-26344 (CVSS 7.2) — An out of bounds memory write when processing the AMD PSP1 Configuration Block (APCB) could allow an attacker …
    CVE-2023-20526 (CVSS 1.9) — Insufficient input validation in the ASP Bootloader may enable a privileged attacker with physical access to e…
    CVE-2023-20521 (CVSS 3.3) — TOCTOU in the ASP Bootloader may allow an attacker with physical access to tamper with SPI ROM records after m…
    CVE-2021-46774 (CVSS 6.7) — Insufficient DRAM address validation in System Management Unit (SMU) may allow an attacker to read/write from/…
    CVE-2023-20592 (CVSS 6.5) — Improper or unexpected behavior of the INVD instruction in some AMD CPUs may allow an attacker with a maliciou…
    CVE-2021-26371 (CVSS 5.5) — A compromised or malicious ABL or UApp could send a SHA256 system call to the bootloader, which may result in …
    CVE-2021-26356 (CVSS 7.4) — A TOCTOU in ASP bootloader may allow an attacker to tamper with the SPI ROM following data read to memory pote…
    CVE-2023-20527 (CVSS 6.5) — Improper syscall input validation in the ASP Bootloader may allow a privileged attacker to read memory out-of-…
    CVE-2021-26403 (CVSS 6.5) — Insufficient checks in SEV may lead to a malicious hypervisor disclosing the launch secret potentially resulti…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High