Skip to main content

Epyc 7763 Firmware CVE-2023-20526

MEDIUM
2023-11-14 psirt@amd.com
4.6
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
4.6 MEDIUM
AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector
Physical
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None

Lifecycle Timeline

1
CVE Published
Nov 14, 2023 - 19:15 nvd
MEDIUM 4.6

DescriptionNVD

Insufficient input validation in the ASP Bootloader may enable a privileged attacker with physical access to expose the contents of ASP memory potentially leading to a loss of confidentiality.

AnalysisAI

Insufficient input validation in the ASP Bootloader may enable a privileged attacker with physical access to expose the contents of ASP memory potentially leading to a loss of confidentiality. Rated medium severity (CVSS 4.6), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Technical ContextAI

Insufficient input validation in the ASP Bootloader may enable a privileged attacker with physical access to expose the contents of ASP memory potentially leading to a loss of confidentiality. Affected products include: Amd Epyc 7001 Firmware, Amd Epyc 7251 Firmware, Amd Epyc 7261 Firmware, Amd Epyc 7281 Firmware, Amd Epyc 7301 Firmware.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

CVE-2023-20520 CRITICAL
9.8 May 09

Improper access control settings in ASP Bootloader may allow an attacker to corrupt the return address causing a stack-b

CVE-2023-20569 MEDIUM POC
4.7 Aug 08

A side channel vulnerability on some of the AMD CPUs may allow an attacker to influence the return address prediction. R

CVE-2021-26340 HIGH
8.4 Dec 10

A malicious hypervisor in conjunction with an unprivileged attacker process inside an SEV/SEV-ES guest VM may fail to fl

CVE-2024-21980 HIGH
7.9 Aug 05

Improper restriction of write operations in SNP firmware could allow a malicious hypervisor to potentially overwrite a g

CVE-2024-21978 HIGH
7.9 Aug 05

Improper input validation in SEV-SNP could allow a malicious hypervisor to read or overwrite guest memory potentially le

CVE-2021-26335 HIGH
7.8 Nov 16

Improper input and range checking in the AMD Secure Processor (ASP) boot loader image header may allow an attacker to us

CVE-2021-26331 HIGH
7.8 Nov 16

AMD System Management Unit (SMU) contains a potential issue where a malicious user may be able to manipulate mailbox ent

CVE-2021-26323 HIGH
7.8 Nov 16

Failure to validate SEV Commands while SNP is active may result in a potential impact to memory integrity. Rated high se

CVE-2021-26315 HIGH
7.8 Nov 16

When the AMD Platform Security Processor (PSP) boot rom loads, authenticates, and subsequently decrypts an encrypted FW,

CVE-2021-26326 HIGH
7.8 Nov 16

Failure to validate VM_HSAVE_PA during SNP_INIT may result in a loss of memory integrity. Rated high severity (CVSS 7.8)

CVE-2023-20566 HIGH
7.5 Nov 14

Improper address validation in ASP with SNP enabled may potentially allow an attacker to compromise guest memory integri

CVE-2023-20533 HIGH
7.5 Nov 14

Insufficient DRAM address validation in System Management Unit (SMU) may allow an attacker to read/write from/to an inva

Share

CVE-2023-20526 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy