Medium severity · published Aug 13, 2024
CVE-2023-20578
A TOCTOU (Time-Of-Check-Time-Of-Use) in SMM may allow an attacker with ring0 privileges and access to the BIOS menu or UEFI shell to modify the communications buffer potentially…
6.4
CVSS
0.1%
EPSS
No
On KEV
Description
A TOCTOU (Time-Of-Check-Time-Of-Use) in SMM may allow
an attacker with ring0 privileges and access to the
BIOS menu or UEFI shell to modify the communications buffer potentially
resulting in arbitrary code execution.
CVSS vector
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
High
Privileges
High
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.1% · higher than 2% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AE
AMD EPYC™ 7001 Processors · AMD
All versions, or not specified · source: vendor
AE
AMD EPYC™ 7002 Processors · AMD
All versions, or not specified · source: vendor
AE
AMD EPYC™ 7003 Processors · AMD
All versions, or not specified · source: vendor
AE
AMD EPYC™ 9004 Processors · AMD
All versions, or not specified · source: vendor
AE
AMD EPYC™ Embedded 3000 · AMD
All versions, or not specified · source: vendor
AE
AMD EPYC™ Embedded 7002 · AMD
All versions, or not specified · source: vendor
AE
AMD EPYC™ Embedded 7003 · AMD
All versions, or not specified · source: vendor
AE
AMD EPYC™ Embedded 9003 · AMD
All versions, or not specified · source: vendor
AR
AMD RyzenTM Embedded V3000 · AMD
All versions, or not specified · source: vendor
AR
AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics · AMD
All versions, or not specified · source: vendor
AR
AMD Ryzen™ 7000 Series Desktop Processors · AMD
All versions, or not specified · source: vendor
AR
AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics · AMD
All versions, or not specified · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2023-20578
CVE.org
https://www.cve.org/CVERecord?id=CVE-2023-20578
Vendor Advisory
https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3003.html
More from AMD EPYC™ 7001 Processors
5.2
CVE-2021-46746
Lack of stack protection exploit mechanisms in ASP Secure OS Trusted Execution Environment (TEE) may allow a privileged attacker with access to AMD signing keys to c006Frrupt the…