NetSight
critical9.8

CVE-2023-20520

Improper access control settings in ASP Bootloader may allow an attacker to corrupt the return address causing a stack-based buffer overrun potentially leading…

Impact

Improper access control settings in ASP Bootloader may allow an attacker to corrupt the return address causing a stack-based buffer overrun potentially leading to arbitrary code execution.

Affected products

VendorProductAffected versions
AmdEpyc 72f3 Firmware
Version milanpi_1.0.0.5
AmdEpyc 7313 Firmware
Version milanpi_1.0.0.5
AmdEpyc 7313p Firmware
Version milanpi_1.0.0.5
AmdEpyc 7343 Firmware
Version milanpi_1.0.0.5
AmdEpyc 7373x Firmware
Version milanpi_1.0.0.5
AmdEpyc 73f3 Firmware
Version milanpi_1.0.0.5
AmdEpyc 7413 Firmware
Version milanpi_1.0.0.5
AmdEpyc 7443 Firmware
Version milanpi_1.0.0.5
AmdEpyc 7443p Firmware
Version milanpi_1.0.0.5
AmdEpyc 7453 Firmware
Version milanpi_1.0.0.5
AmdEpyc 7473x Firmware
Version milanpi_1.0.0.5
AmdEpyc 74f3 Firmware
Version milanpi_1.0.0.5

Weakness classification

References