CVE-2023-20523 : TOCTOU in the ASP may allow a physical attacker to write beyond the buffer bound

TOCTOU in the ASP may allow a physical attacker to write beyond the buffer bounds, potentially leading to a loss of integrity or denial of service.

Published 2023-01-11 08:15:14

Updated 2023-01-24 16:16:56

Source Advanced Micro Devices Inc.

View at NVD, CVE.org

Vulnerability category: Denial of service

Products affected by CVE-2023-20523

AMD » Epyc 7f72 Firmware
Versions before (<) romepi_1.0.0.c
cpe:2.3:o:amd:epyc_7f72_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7f72 » Version: N/A
AMD » Epyc 7f52 Firmware
Versions before (<) romepi_1.0.0.c
cpe:2.3:o:amd:epyc_7f52_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7f52 » Version: N/A
AMD » Epyc 7f32 Firmware
Versions before (<) romepi_1.0.0.c
cpe:2.3:o:amd:epyc_7f32_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7f32 » Version: N/A
AMD » Epyc 7h12 Firmware
Versions before (<) romepi_1.0.0.c
cpe:2.3:o:amd:epyc_7h12_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7h12 » Version: N/A
AMD » Epyc 7742 Firmware
Versions before (<) romepi_1.0.0.c
cpe:2.3:o:amd:epyc_7742_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7742 » Version: N/A
AMD » Epyc 7702 Firmware
Versions before (<) romepi_1.0.0.c
cpe:2.3:o:amd:epyc_7702_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7702 » Version: N/A
AMD » Epyc 7702p Firmware
Versions before (<) romepi_1.0.0.c
cpe:2.3:o:amd:epyc_7702p_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7702p » Version: N/A
AMD » Epyc 7662 Firmware
Versions before (<) romepi_1.0.0.c
cpe:2.3:o:amd:epyc_7662_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7662 » Version: N/A
AMD » Epyc 7642 Firmware
Versions before (<) romepi_1.0.0.c
cpe:2.3:o:amd:epyc_7642_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7642 » Version: N/A
AMD » Epyc 7552 Firmware
Versions before (<) romepi_1.0.0.c
cpe:2.3:o:amd:epyc_7552_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7552 » Version: N/A
AMD » Epyc 7542 Firmware
Versions before (<) romepi_1.0.0.c
cpe:2.3:o:amd:epyc_7542_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7542 » Version: N/A
AMD » Epyc 7532 Firmware
Versions before (<) romepi_1.0.0.c
cpe:2.3:o:amd:epyc_7532_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7532 » Version: N/A
AMD » Epyc 7502 Firmware
Versions before (<) romepi_1.0.0.c
cpe:2.3:o:amd:epyc_7502_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7502 » Version: N/A
AMD » Epyc 7502p Firmware
Versions before (<) romepi_1.0.0.c
cpe:2.3:o:amd:epyc_7502p_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7502p » Version: N/A
AMD » Epyc 7452 Firmware
Versions before (<) romepi_1.0.0.c
cpe:2.3:o:amd:epyc_7452_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7452 » Version: N/A
AMD » Epyc 7402 Firmware
Versions before (<) romepi_1.0.0.c
cpe:2.3:o:amd:epyc_7402_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7402 » Version: N/A
AMD » Epyc 7402p Firmware
Versions before (<) romepi_1.0.0.c
cpe:2.3:o:amd:epyc_7402p_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7402p » Version: N/A
AMD » Epyc 7352 Firmware
Versions before (<) romepi_1.0.0.c
cpe:2.3:o:amd:epyc_7352_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7352 » Version: N/A
AMD » Epyc 7302 Firmware
Versions before (<) romepi_1.0.0.c
cpe:2.3:o:amd:epyc_7302_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7302 » Version: N/A
AMD » Epyc 7302p Firmware
Versions before (<) romepi_1.0.0.c
cpe:2.3:o:amd:epyc_7302p_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7302p » Version: N/A
AMD » Epyc 7282 Firmware
Versions before (<) romepi_1.0.0.c
cpe:2.3:o:amd:epyc_7282_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7282 » Version: N/A
AMD » Epyc 7272 Firmware
Versions before (<) romepi_1.0.0.c
cpe:2.3:o:amd:epyc_7272_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7272 » Version: N/A
AMD » Epyc 7262 Firmware
Versions before (<) romepi_1.0.0.c
cpe:2.3:o:amd:epyc_7262_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7262 » Version: N/A
AMD » Epyc 7252 Firmware
Versions before (<) romepi_1.0.0.c
cpe:2.3:o:amd:epyc_7252_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7252 » Version: N/A
AMD » Epyc 7232p Firmware
Versions before (<) romepi_1.0.0.c
cpe:2.3:o:amd:epyc_7232p_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7232p » Version: N/A
AMD » Epyc 7763 Firmware
Versions before (<) milanpi_1.0.0.5
cpe:2.3:o:amd:epyc_7763_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7763 » Version: N/A
AMD » Epyc 7713p Firmware
Versions before (<) milanpi_1.0.0.5
cpe:2.3:o:amd:epyc_7713p_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7713p » Version: N/A
AMD » Epyc 7713 Firmware
Versions before (<) milanpi_1.0.0.5
cpe:2.3:o:amd:epyc_7713_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7713 » Version: N/A
AMD » Epyc 7663 Firmware
Versions before (<) milanpi_1.0.0.5
cpe:2.3:o:amd:epyc_7663_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7663 » Version: N/A
AMD » Epyc 7643 Firmware
Versions before (<) milanpi_1.0.0.5
cpe:2.3:o:amd:epyc_7643_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7643 » Version: N/A
AMD » Epyc 75f3 Firmware
Versions before (<) milanpi_1.0.0.5
cpe:2.3:o:amd:epyc_75f3_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 75f3 » Version: N/A
AMD » Epyc 7543p Firmware
Versions before (<) milanpi_1.0.0.5
cpe:2.3:o:amd:epyc_7543p_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7543p » Version: N/A
AMD » Epyc 7543 Firmware
Versions before (<) milanpi_1.0.0.5
cpe:2.3:o:amd:epyc_7543_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7543 » Version: N/A
AMD » Epyc 7513 Firmware
Versions before (<) milanpi_1.0.0.5
cpe:2.3:o:amd:epyc_7513_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7513 » Version: N/A
AMD » Epyc 7453 Firmware
Versions before (<) milanpi_1.0.0.5
cpe:2.3:o:amd:epyc_7453_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7453 » Version: N/A
AMD » Epyc 74f3 Firmware
Versions before (<) milanpi_1.0.0.5
cpe:2.3:o:amd:epyc_74f3_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 74f3 » Version: N/A
AMD » Epyc 7443p Firmware
Versions before (<) milanpi_1.0.0.5
cpe:2.3:o:amd:epyc_7443p_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7443p » Version: N/A
AMD » Epyc 7443 Firmware
Versions before (<) milanpi_1.0.0.5
cpe:2.3:o:amd:epyc_7443_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7443 » Version: N/A
AMD » Epyc 7413 Firmware
Versions before (<) milanpi_1.0.0.5
cpe:2.3:o:amd:epyc_7413_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7413 » Version: N/A
AMD » Epyc 73f3 Firmware
Versions before (<) milanpi_1.0.0.5
cpe:2.3:o:amd:epyc_73f3_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 73f3 » Version: N/A
AMD » Epyc 7343 Firmware
Versions before (<) milanpi_1.0.0.5
cpe:2.3:o:amd:epyc_7343_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7343 » Version: N/A
AMD » Epyc 7313p Firmware
Versions before (<) milanpi_1.0.0.5
cpe:2.3:o:amd:epyc_7313p_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7313p » Version: N/A
AMD » Epyc 7313 Firmware
Versions before (<) milanpi_1.0.0.5
cpe:2.3:o:amd:epyc_7313_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7313 » Version: N/A
AMD » Epyc 72f3 Firmware
Versions before (<) milanpi_1.0.0.5
cpe:2.3:o:amd:epyc_72f3_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 72f3 » Version: N/A
AMD » Epyc 7003 Firmware
Versions before (<) milanpi_1.0.0.5
cpe:2.3:o:amd:epyc_7003_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7003 » Version: N/A
AMD » Epyc 7002 Firmware
Versions before (<) romepi_1.0.0.c
cpe:2.3:o:amd:epyc_7002_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7002 » Version: N/A
AMD » Epyc 7773x Firmware
Versions before (<) milanpi_1.0.0.5
cpe:2.3:o:amd:epyc_7773x_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7773x » Version: N/A
AMD » Epyc 7573x Firmware
Versions before (<) milanpi_1.0.0.5
cpe:2.3:o:amd:epyc_7573x_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7573x » Version: N/A
AMD » Epyc 7373x Firmware
Versions before (<) milanpi_1.0.0.5
cpe:2.3:o:amd:epyc_7373x_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7373x » Version: N/A
AMD » Epyc 7743 Firmware
Versions before (<) milanpi_1.0.0.5
cpe:2.3:o:amd:epyc_7743_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7743 » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2023-20523

EPSS FAQ

0.05%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 20 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2023-20523

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
5.7	MEDIUM	CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H	0.5	5.2	NIST
Attack Vector: Physical Attack Complexity: High Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: None Integrity: High Availability: High

CWE ids for CVE-2023-20523

CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition

The product checks the state of a resource before using that resource, but the resource's state can change between the check and the use in a way that invalidates the results of the check. This can cause the product to perform invalid actions when the resource is in an unexpected state.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2023-20523

https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032

Access Denied
Vendor Advisory

CVEs referencing this url

Jump to

Vulnerability Details : CVE-2023-20523

Products affected by CVE-2023-20523

Exploit prediction scoring system (EPSS) score for CVE-2023-20523

CVSS scores for CVE-2023-20523

CWE ids for CVE-2023-20523

References for CVE-2023-20523