Vulnerability Details : CVE-2023-20524
An attacker with a compromised ASP could
possibly send malformed commands to an ASP on another CPU, resulting in an out
of bounds write, potentially leading to a loss a loss of integrity.
Products affected by CVE-2023-20524
- cpe:2.3:o:amd:epyc_7f72_firmware:romepi_1.0.0.c:*:*:*:*:*:*:*
- cpe:2.3:o:amd:epyc_7f52_firmware:romepi_1.0.0.c:*:*:*:*:*:*:*
- cpe:2.3:o:amd:epyc_7f32_firmware:romepi_1.0.0.c:*:*:*:*:*:*:*
- cpe:2.3:o:amd:epyc_7h12_firmware:romepi_1.0.0.c:*:*:*:*:*:*:*
- cpe:2.3:o:amd:epyc_7742_firmware:romepi_1.0.0.c:*:*:*:*:*:*:*
- cpe:2.3:o:amd:epyc_7702_firmware:romepi_1.0.0.c:*:*:*:*:*:*:*
- cpe:2.3:o:amd:epyc_7702p_firmware:romepi_1.0.0.c:*:*:*:*:*:*:*
- cpe:2.3:o:amd:epyc_7662_firmware:romepi_1.0.0.c:*:*:*:*:*:*:*
- cpe:2.3:o:amd:epyc_7642_firmware:romepi_1.0.0.c:*:*:*:*:*:*:*
- cpe:2.3:o:amd:epyc_7552_firmware:romepi_1.0.0.c:*:*:*:*:*:*:*
- cpe:2.3:o:amd:epyc_7542_firmware:romepi_1.0.0.c:*:*:*:*:*:*:*
- cpe:2.3:o:amd:epyc_7532_firmware:romepi_1.0.0.c:*:*:*:*:*:*:*
- cpe:2.3:o:amd:epyc_7502_firmware:romepi_1.0.0.c:*:*:*:*:*:*:*
- cpe:2.3:o:amd:epyc_7502p_firmware:romepi_1.0.0.c:*:*:*:*:*:*:*
- cpe:2.3:o:amd:epyc_7452_firmware:romepi_1.0.0.c:*:*:*:*:*:*:*
- cpe:2.3:o:amd:epyc_7402_firmware:romepi_1.0.0.c:*:*:*:*:*:*:*
- cpe:2.3:o:amd:epyc_7402p_firmware:romepi_1.0.0.c:*:*:*:*:*:*:*
- cpe:2.3:o:amd:epyc_7352_firmware:romepi_1.0.0.c:*:*:*:*:*:*:*
- cpe:2.3:o:amd:epyc_7302_firmware:romepi_1.0.0.c:*:*:*:*:*:*:*
- cpe:2.3:o:amd:epyc_7302p_firmware:romepi_1.0.0.c:*:*:*:*:*:*:*
- cpe:2.3:o:amd:epyc_7282_firmware:romepi_1.0.0.c:*:*:*:*:*:*:*
- cpe:2.3:o:amd:epyc_7272_firmware:romepi_1.0.0.c:*:*:*:*:*:*:*
- cpe:2.3:o:amd:epyc_7262_firmware:romepi_1.0.0.c:*:*:*:*:*:*:*
- cpe:2.3:o:amd:epyc_7252_firmware:romepi_1.0.0.c:*:*:*:*:*:*:*
- cpe:2.3:o:amd:epyc_7232p_firmware:romepi_1.0.0.c:*:*:*:*:*:*:*
- cpe:2.3:o:amd:epyc_7763_firmware:milanpi_1.0.0.5:*:*:*:*:*:*:*
- cpe:2.3:o:amd:epyc_7713p_firmware:milanpi_1.0.0.5:*:*:*:*:*:*:*
- cpe:2.3:o:amd:epyc_7713_firmware:milanpi_1.0.0.5:*:*:*:*:*:*:*
- cpe:2.3:o:amd:epyc_7663_firmware:milanpi_1.0.0.5:*:*:*:*:*:*:*
- cpe:2.3:o:amd:epyc_7643_firmware:milanpi_1.0.0.5:*:*:*:*:*:*:*
- cpe:2.3:o:amd:epyc_75f3_firmware:milanpi_1.0.0.5:*:*:*:*:*:*:*
- cpe:2.3:o:amd:epyc_7543p_firmware:milanpi_1.0.0.5:*:*:*:*:*:*:*
- cpe:2.3:o:amd:epyc_7543_firmware:milanpi_1.0.0.5:*:*:*:*:*:*:*
- cpe:2.3:o:amd:epyc_7513_firmware:milanpi_1.0.0.5:*:*:*:*:*:*:*
- cpe:2.3:o:amd:epyc_7453_firmware:milanpi_1.0.0.5:*:*:*:*:*:*:*
- cpe:2.3:o:amd:epyc_74f3_firmware:milanpi_1.0.0.5:*:*:*:*:*:*:*
- cpe:2.3:o:amd:epyc_7443p_firmware:milanpi_1.0.0.5:*:*:*:*:*:*:*
- cpe:2.3:o:amd:epyc_7443_firmware:milanpi_1.0.0.5:*:*:*:*:*:*:*
- cpe:2.3:o:amd:epyc_7413_firmware:milanpi_1.0.0.5:*:*:*:*:*:*:*
- cpe:2.3:o:amd:epyc_73f3_firmware:milanpi_1.0.0.5:*:*:*:*:*:*:*
- cpe:2.3:o:amd:epyc_7343_firmware:milanpi_1.0.0.5:*:*:*:*:*:*:*
- cpe:2.3:o:amd:epyc_7313p_firmware:milanpi_1.0.0.5:*:*:*:*:*:*:*
- cpe:2.3:o:amd:epyc_7313_firmware:milanpi_1.0.0.5:*:*:*:*:*:*:*
- cpe:2.3:o:amd:epyc_72f3_firmware:milanpi_1.0.0.5:*:*:*:*:*:*:*
- cpe:2.3:o:amd:epyc_7773x_firmware:milanpi_1.0.0.5:*:*:*:*:*:*:*
- cpe:2.3:o:amd:epyc_7473x_firmware:milanpi_1.0.0.5:*:*:*:*:*:*:*
- cpe:2.3:o:amd:epyc_7573x_firmware:milanpi_1.0.0.5:*:*:*:*:*:*:*
- cpe:2.3:o:amd:epyc_7373x_firmware:milanpi_1.0.0.5:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2023-20524
0.06%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 25 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2023-20524
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
---|---|---|---|---|---|---|
7.5
|
HIGH | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N |
3.9
|
3.6
|
134c704f-9b21-4f2e-91b3-4a467353bcc0 | 2025-01-28 |
7.5
|
HIGH | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N |
3.9
|
3.6
|
NIST |
CWE ids for CVE-2023-20524
-
The product writes data past the end, or before the beginning, of the intended buffer.Assigned by:
- 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)
- nvd@nist.gov (Primary)
References for CVE-2023-20524
-
https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3001
Access DeniedVendor Advisory
Jump to