High severity · published Feb 13, 2024
CVE-2023-20587
Improper Access Control in System Management Mode (SMM) may allow an attacker access to the SPI flash potentially leading to arbitrary code execution
7.1
CVSS
0.2%
EPSS
No
On KEV
Description
Improper
Access Control in System Management Mode (SMM) may allow an attacker access to
the SPI flash potentially leading to arbitrary code execution.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 7% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
1G
1st Gen AMD EPYC™ Processors · AMD
various · source: vendor
2G
2nd Gen AMD EPYC™ Processors · AMD
various · source: vendor
3G
3rd Gen AMD EPYC™ Processors · AMD
various · source: vendor
4G
4th Gen AMD EPYC™ Processors · AMD
various · source: vendor
AE
AMD EPYC(TM) Embedded 3000 · AMD
various · source: vendor
AE
AMD EPYC(TM) Embedded 7002 · AMD
various · source: vendor
AE
AMD EPYC(TM) Embedded 7003 · AMD
various · source: vendor
AE
AMD EPYC(TM) Embedded 9003 · AMD
various · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2023-20587
CVE.org
https://www.cve.org/CVERecord?id=CVE-2023-20587
www.amd.com
https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-7009
More from 1st Gen AMD EPYC™ Processors
8.2
CVE-2022-23829
A potential weakness in AMD SPI protection features may allow a malicious attacker with Ring0 (kernel mode) access to bypass the native System Management Mode (SMM) ROM…
7.5
CVE-2023-31315
Improper validation in a model specific register (MSR) could allow a malicious program with ring0 access to modify SMM configuration while SMI lock is enabled, potentially leading…
7.5
CVE-2021-46774
Insufficient DRAM address validation in System Management Unit (SMU) may allow an attacker to read/write from/to an invalid DRAM address, potentially resulting in…
6.5
CVE-2023-20592
Improper or unexpected behavior of the INVD instruction in some AMD CPUs may allow an attacker with a malicious hypervisor to affect cache line write-back behavior of the CPU…
5.7
CVE-2023-20521
TOCTOU in the ASP Bootloader may allow an attacker with physical access to tamper with SPI ROM records after memory content verification, potentially leading to loss of…