high7.5
CVE-2023-20578
A TOCTOU (Time-Of-Check-Time-Of-Use) in SMM may allow an attacker with ring0 privileges and access to the BIOS menu or UEFI shell to modify the communications …
Impact
A TOCTOU (Time-Of-Check-Time-Of-Use) in SMM may allow an attacker with ring0 privileges and access to the BIOS menu or UEFI shell to modify the communications buffer potentially resulting in arbitrary code execution.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Amd | Epyc 8024pn Firmware | before genoapi_1.0.0.2 |
| Amd | Epyc 8024p Firmware | before genoapi_1.0.0.2 |
| Amd | Epyc 8124pn Firmware | before genoapi_1.0.0.2 |
| Amd | Epyc 8124p Firmware | before genoapi_1.0.0.2 |
| Amd | Epyc 8224pn Firmware | before genoapi_1.0.0.2 |
| Amd | Epyc 8224p Firmware | before genoapi_1.0.0.2 |
| Amd | Epyc 8324pn Firmware | before genoapi_1.0.0.2 |
| Amd | Epyc 8324p Firmware | before genoapi_1.0.0.2 |
| Amd | Epyc 8434pn Firmware | before genoapi_1.0.0.2 |
| Amd | Epyc 8434p Firmware | before genoapi_1.0.0.2 |
| Amd | Epyc 8534pn Firmware | before genoapi_1.0.0.2 |
| Amd | Epyc 8534p Firmware | before genoapi_1.0.0.2 |