NetSight
medium6.5

CVE-2023-20527

Improper syscall input validation in the ASP Bootloader may allow a privileged attacker to read memory out-of-bounds, potentially leading to a denial-of-servic…

Impact

Improper syscall input validation in the ASP Bootloader may allow a privileged attacker to read memory out-of-bounds, potentially leading to a denial-of-service.

Affected products

VendorProductAffected versions
AmdEpyc 7h12 Firmware
before romepi_1.0.0.c
AmdEpyc 7f72 Firmware
before romepi_1.0.0.c
AmdEpyc 7f52 Firmware
before romepi_1.0.0.c
AmdEpyc 7f32 Firmware
before romepi_1.0.0.c
AmdEpyc 7742 Firmware
before romepi_1.0.0.c
AmdEpyc 7702p Firmware
before romepi_1.0.0.c
AmdEpyc 7702 Firmware
before romepi_1.0.0.c
AmdEpyc 7662 Firmware
before romepi_1.0.0.c
AmdEpyc 7642 Firmware
before romepi_1.0.0.c
AmdEpyc 7552 Firmware
before romepi_1.0.0.c
AmdEpyc 7542 Firmware
before romepi_1.0.0.c
AmdEpyc 7532 Firmware
before romepi_1.0.0.c

Weakness classification

References