CVE-2023-20578
MEDIUM EPSS 1.9%
Published Aug 13, 20241y ago · Modified Jun 17, 20262w ago
6.4 CVSS 3.1
Published Aug 13, 2024 1y ago
Last Modified Jun 17, 2026 2w ago
Description
A TOCTOU (Time-Of-Check-Time-Of-Use) in SMM may allow an attacker with ring0 privileges and access to the BIOS menu or UEFI shell to modify the communications buffer potentially resulting in arbitrary code execution.
CVSS Details
Base Score
Exploitability
Impact
Vector string
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H Attack Vector Local
Attack Complexity High
Privileges Required High
User Interaction None
Scope Unchanged
Confidentiality High
Integrity High
Availability High
Threat Intelligence
EPSS Exploit Probability
1.9% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available
Weaknesses 1
CWE-367
Affected Products 210
| Vendor | Product | Version | Range |
|---|---|---|---|
| amd | epyc_8024pn_firmware | * | <genoapi_1.0.0.2 |
| amd | epyc_8024pn | * | any |
| amd | epyc_8024p_firmware | * | <genoapi_1.0.0.2 |
| amd | epyc_8024p | * | any |
| amd | epyc_8124pn_firmware | * | <genoapi_1.0.0.2 |
| amd | epyc_8124pn | * | any |
| amd | epyc_8124p_firmware | * | <genoapi_1.0.0.2 |
| amd | epyc_8124p | * | any |
| amd | epyc_8224pn_firmware | * | <genoapi_1.0.0.2 |
| amd | epyc_8224pn | * | any |
| amd | epyc_8224p_firmware | * | <genoapi_1.0.0.2 |
| amd | epyc_8224p | * | any |
| amd | epyc_8324pn_firmware | * | <genoapi_1.0.0.2 |
| amd | epyc_8324pn | * | any |
| amd | epyc_8324p_firmware | * | <genoapi_1.0.0.2 |
| amd | epyc_8324p | * | any |
| amd | epyc_8434pn_firmware | * | <genoapi_1.0.0.2 |
| amd | epyc_8434pn | * | any |
| amd | epyc_8434p_firmware | * | <genoapi_1.0.0.2 |
| amd | epyc_8434p | * | any |
| amd | epyc_8534pn_firmware | * | <genoapi_1.0.0.2 |
| amd | epyc_8534pn | * | any |
| amd | epyc_8534p_firmware | * | <genoapi_1.0.0.2 |
| amd | epyc_8534p | * | any |
| amd | epyc_9734_firmware | * | <genoapi_1.0.0.2 |
| amd | epyc_9734 | * | any |
| amd | epyc_9754s_firmware | * | <genoapi_1.0.0.2 |
| amd | epyc_9754s | * | any |
| amd | epyc_9754_firmware | * | <genoapi_1.0.0.2 |
| amd | epyc_9754 | * | any |
| amd | epyc_9184x_firmware | * | <genoapi_1.0.0.2 |
| amd | epyc_9184x | * | any |
| amd | epyc_9384x_firmware | * | <genoapi_1.0.0.2 |
| amd | epyc_9384x | * | any |
| amd | epyc_9684x_firmware | * | <genoapi_1.0.0.2 |
| amd | epyc_9684x | * | any |
| amd | epyc_9124_firmware | * | <genoapi_1.0.0.2 |
| amd | epyc_9124 | * | any |
| amd | epyc_9174f_firmware | * | <genoapi_1.0.0.2 |
| amd | epyc_9174f | * | any |
| amd | epyc_9224_firmware | * | <genoapi_1.0.0.2 |
| amd | epyc_9224 | * | any |
| amd | epyc_9254_firmware | * | <genoapi_1.0.0.2 |
| amd | epyc_9254 | * | any |
| amd | epyc_9274f_firmware | * | <genoapi_1.0.0.2 |
| amd | epyc_9274f | * | any |
| amd | epyc_9334_firmware | * | <genoapi_1.0.0.2 |
| amd | epyc_9334 | * | any |
| amd | epyc_9354_firmware | * | <genoapi_1.0.0.2 |
| amd | epyc_9354 | * | any |
| amd | epyc_9354p_firmware | * | <genoapi_1.0.0.2 |
| amd | epyc_9354p | * | any |
| amd | epyc_9374f_firmware | * | <genoapi_1.0.0.2 |
| amd | epyc_9374f | * | any |
| amd | epyc_9454_firmware | * | <genoapi_1.0.0.2 |
| amd | epyc_9454 | * | any |
| amd | epyc_9454p_firmware | * | <genoapi_1.0.0.2 |
| amd | epyc_9454p | * | any |
| amd | epyc_9474f_firmware | * | <genoapi_1.0.0.2 |
| amd | epyc_9474f | * | any |
| amd | epyc_9534_firmware | * | <genoapi_1.0.0.2 |
| amd | epyc_9534 | * | any |
| amd | epyc_9554_firmware | * | <genoapi_1.0.0.2 |
| amd | epyc_9554 | * | any |
| amd | epyc_9554p_firmware | * | <genoapi_1.0.0.2 |
| amd | epyc_9554p | * | any |
| amd | epyc_9634_firmware | * | <genoapi_1.0.0.2 |
| amd | epyc_9634 | * | any |
| amd | epyc_9654_firmware | * | <genoapi_1.0.0.2 |
| amd | epyc_9654 | * | any |
| amd | epyc_9654p_firmware | * | <genoapi_1.0.0.2 |
| amd | epyc_9654p | * | any |
| amd | epyc_7203_firmware | * | <milanpi_1.0.0.5 |
| amd | epyc_7203 | * | any |
| amd | epyc_7203p_firmware | * | <milanpi_1.0.0.5 |
| amd | epyc_7203p | * | any |
| amd | epyc_72f3_firmware | * | <milanpi_1.0.0.5 |
| amd | epyc_72f3 | * | any |
| amd | epyc_7303_firmware | * | <milanpi_1.0.0.5 |
| amd | epyc_7303 | * | any |
| amd | epyc_7303p_firmware | * | <milanpi_1.0.0.5 |
| amd | epyc_7303p | * | any |
| amd | epyc_7313_firmware | * | <milanpi_1.0.0.5 |
| amd | epyc_7313 | * | any |
| amd | epyc_7313p_firmware | * | <milanpi_1.0.0.5 |
| amd | epyc_7313p | * | any |
| amd | epyc_7343_firmware | * | <milanpi_1.0.0.5 |
| amd | epyc_7343 | * | any |
| amd | epyc_73f3_firmware | * | <milanpi_1.0.0.5 |
| amd | epyc_73f3 | * | any |
| amd | epyc_7373x_firmware | * | <milanpi_1.0.0.5 |
| amd | epyc_7373x | * | any |
| amd | epyc_7413_firmware | * | <milanpi_1.0.0.5 |
| amd | epyc_7413 | * | any |
| amd | epyc_7443_firmware | * | <milanpi_1.0.0.5 |
| amd | epyc_7443 | * | any |
| amd | epyc_7443p_firmware | * | <milanpi_1.0.0.5 |
| amd | epyc_7443p | * | any |
| amd | epyc_74f3_firmware | * | <milanpi_1.0.0.5 |
| amd | epyc_74f3 | * | any |
| amd | epyc_7453_firmware | * | <milanpi_1.0.0.5 |
| amd | epyc_7453 | * | any |
| amd | epyc_7473x_firmware | * | <milanpi_1.0.0.5 |
| amd | epyc_7473x | * | any |
| amd | epyc_7513_firmware | * | <milanpi_1.0.0.5 |
| amd | epyc_7513 | * | any |
| amd | epyc_7543_firmware | * | <milanpi_1.0.0.5 |
| amd | epyc_7543 | * | any |
| amd | epyc_7543p_firmware | * | <milanpi_1.0.0.5 |
| amd | epyc_7543p | * | any |
| amd | epyc_75f3_firmware | * | <milanpi_1.0.0.5 |
| amd | epyc_75f3 | * | any |
| amd | epyc_7573x_firmware | * | <milanpi_1.0.0.5 |
| amd | epyc_7573x | * | any |
| amd | epyc_7643_firmware | * | <milanpi_1.0.0.5 |
| amd | epyc_7643 | * | any |
| amd | epyc_7773x_firmware | * | <milanpi_1.0.0.5 |
| amd | epyc_7773x | * | any |
| amd | epyc_7643p_firmware | * | <milanpi_1.0.0.5 |
| amd | epyc_7643p | * | any |
| amd | epyc_7663_firmware | * | <milanpi_1.0.0.5 |
| amd | epyc_7663 | * | any |
| amd | epyc_7663p_firmware | * | <milanpi_1.0.0.5 |
| amd | epyc_7663p | * | any |
| amd | epyc_7713_firmware | * | <milanpi_1.0.0.5 |
| amd | epyc_7713 | * | any |
| amd | epyc_7713p_firmware | * | <milanpi_1.0.0.5 |
| amd | epyc_7713p | * | any |
| amd | epyc_7763_firmware | * | <milanpi_1.0.0.5 |
| amd | epyc_7763 | * | any |
| amd | epyc_7h12_firmware | * | <romepi_1.0.0.g |
| amd | epyc_7h12 | * | any |
| amd | epyc_7f72_firmware | * | <romepi_1.0.0.g |
| amd | epyc_7f72 | * | any |
| amd | epyc_7f52_firmware | * | <romepi_1.0.0.g |
| amd | epyc_7f52 | * | any |
| amd | epyc_7f32_firmware | * | <romepi_1.0.0.g |
| amd | epyc_7f32 | * | any |
| amd | epyc_7742_firmware | * | <romepi_1.0.0.g |
| amd | epyc_7742 | * | any |
| amd | epyc_7702p_firmware | * | <romepi_1.0.0.g |
| amd | epyc_7702p | * | any |
| amd | epyc_7702_firmware | * | <romepi_1.0.0.g |
| amd | epyc_7702 | * | any |
| amd | epyc_7662_firmware | * | <romepi_1.0.0.g |
| amd | epyc_7662 | * | any |
| amd | epyc_7642_firmware | * | <romepi_1.0.0.g |
| amd | epyc_7642 | * | any |
| amd | epyc_7552_firmware | * | <romepi_1.0.0.g |
| amd | epyc_7552 | * | any |
| amd | epyc_7542_firmware | * | <romepi_1.0.0.g |
| amd | epyc_7542 | * | any |
| amd | epyc_7532_firmware | * | <romepi_1.0.0.g |
| amd | epyc_7532 | * | any |
| amd | epyc_7502p_firmware | * | <romepi_1.0.0.g |
| amd | epyc_7502p | * | any |
| amd | epyc_7502_firmware | * | <romepi_1.0.0.g |
| amd | epyc_7502 | * | any |
| amd | epyc_7452_firmware | * | <romepi_1.0.0.g |
| amd | epyc_7452 | * | any |
| amd | epyc_7402p_firmware | * | <romepi_1.0.0.g |
| amd | epyc_7402p | * | any |
| amd | epyc_7402_firmware | * | <romepi_1.0.0.g |
| amd | epyc_7402 | * | any |
| amd | epyc_7352_firmware | * | <romepi_1.0.0.g |
| amd | epyc_7352 | * | any |
| amd | epyc_7302p_firmware | * | <romepi_1.0.0.g |
| amd | epyc_7302p | * | any |
| amd | epyc_7302_firmware | * | <romepi_1.0.0.g |
| amd | epyc_7302 | * | any |
| amd | epyc_7282_firmware | * | <romepi_1.0.0.g |
| amd | epyc_7282 | * | any |
| amd | epyc_7272_firmware | * | <romepi_1.0.0.g |
| amd | epyc_7272 | * | any |
| amd | epyc_7262_firmware | * | <romepi_1.0.0.g |
| amd | epyc_7262 | * | any |
| amd | epyc_7252_firmware | * | <romepi_1.0.0.g |
| amd | epyc_7252 | * | any |
| amd | epyc_7232p_firmware | * | <romepi_1.0.0.g |
| amd | epyc_7232p | * | any |
| amd | epyc_7601_firmware | * | <naplespi_1.0.0.k |
| amd | epyc_7601 | * | any |
| amd | epyc_7551p_firmware | * | <naplespi_1.0.0.k |
| amd | epyc_7551p | * | any |
| amd | epyc_7551_firmware | * | <naplespi_1.0.0.k |
| amd | epyc_7551 | * | any |
| amd | epyc_7501_firmware | * | <naplespi_1.0.0.k |
| amd | epyc_7501 | * | any |
| amd | epyc_7451_firmware | * | <naplespi_1.0.0.k |
| amd | epyc_7451 | * | any |
| amd | epyc_7401p_firmware | * | <naplespi_1.0.0.k |
| amd | epyc_7401p | * | any |
| amd | epyc_7401_firmware | * | <naplespi_1.0.0.k |
| amd | epyc_7401 | * | any |
| amd | epyc_7371_firmware | * | <naplespi_1.0.0.k |
| amd | epyc_7371 | * | any |
| amd | epyc_7351p_firmware | * | <naplespi_1.0.0.k |
| amd | epyc_7351p | * | any |
| amd | epyc_7351_firmware | * | <naplespi_1.0.0.k |
| amd | epyc_7351 | * | any |
| amd | epyc_7301_firmware | * | <naplespi_1.0.0.k |
| amd | epyc_7301 | * | any |
| amd | epyc_7281_firmware | * | <naplespi_1.0.0.k |
| amd | epyc_7281 | * | any |
| amd | epyc_7261_firmware | * | <naplespi_1.0.0.k |
| amd | epyc_7261 | * | any |
| amd | epyc_7251_firmware | * | <naplespi_1.0.0.k |
| amd | epyc_7251 | * | any |
| amd | epyc_7001_firmware | * | <naplespi_1.0.0.k |
| amd | epyc_7001 | * | any |
References 1
- amd.com https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3003.html
Remediation
No remediation data recorded yet
Check vendor advisories and the NVD entry for patch availability.