low1.9
CVE-2023-20526
Insufficient input validation in the ASP Bootloader may enable a privileged attacker with physical access to expose the contents of ASP memory potentially lead…
Impact
Insufficient input validation in the ASP Bootloader may enable a privileged attacker with physical access to expose the contents of ASP memory potentially leading to a loss of confidentiality.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Amd | Epyc 7001 Firmware | before naplespi_1.0.0.h |
| Amd | Epyc 7251 Firmware | before naplespi_1.0.0.h |
| Amd | Epyc 7261 Firmware | before naplespi_1.0.0.h |
| Amd | Epyc 7281 Firmware | before naplespi_1.0.0.h |
| Amd | Epyc 7301 Firmware | before naplespi_1.0.0.h |
| Amd | Epyc 7351 Firmware | before naplespi_1.0.0.h |
| Amd | Epyc 7351p Firmware | before naplespi_1.0.0.h |
| Amd | Epyc 7371 Firmware | before naplespi_1.0.0.h |
| Amd | Epyc 7401 Firmware | before naplespi_1.0.0.h |
| Amd | Epyc 7401p Firmware | before naplespi_1.0.0.h |
| Amd | Epyc 7451 Firmware | before naplespi_1.0.0.h |
| Amd | Epyc 7501 Firmware | before naplespi_1.0.0.h |
References
- NVD record
- CVE.org record
- https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3002
- https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4002
- https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-5001
- https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3002
- https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4002
- https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-5001