CVE-2023-20521

🗓️ 14 Nov 2023 18:52:31Reported by AMDType

TOCTOU in ASP Bootloader, possible loss of confidentiality, denial of servic

Reporter	Title	Published	Views	Family All 36
Amd	AMD Server Vulnerabilities – Nov 2023	14 Nov 202300:00	–	amd
Amd	AMD Client Vulnerabilities – November 2023	14 Nov 202300:00	–	amd
Amd	AMD Embedded Processors Vulnerabilities – February 2024	13 Feb 202400:00	–	amd
BDU FSTEC	The vulnerability of the ASP Bootloader component of AMD’s microprogramming software allows a hacker to disclose sensitive information or cause system failures.	17 Jan 202400:00	–	bdu_fstec
Circl	CVE-2023-20521	13 Feb 202421:31	–	circl
CNNVD	AMD EPYC Security Vulnerability	14 Nov 202300:00	–	cnnvd
Cvelist	CVE-2023-20521	14 Nov 202318:52	–	cvelist
EUVD	EUVD-2023-24700	3 Oct 202520:07	–	euvd
Hewlett-Packard	AMD Client UEFI Firmware November 2023 Security Update	8 Jan 202400:00	–	hp
NVD	CVE-2023-20521	14 Nov 202319:15	–	nvd

NVD

Node

amd epyc_7001_firmwareRange<naplespi_1.0.0.h

AND

amd epyc_7001Match-

Node

amd epyc_7251_firmwareRange<naplespi_1.0.0.h

AND

amd epyc_7251Match-

Node

amd epyc_7261_firmwareRange<naplespi_1.0.0.h

AND

amd epyc_7261Match-

Node

amd epyc_7281_firmwareRange<naplespi_1.0.0.h

AND

amd epyc_7281Match-

Node

amd epyc_7301_firmwareRange<naplespi_1.0.0.h

AND

amd epyc_7301Match-

Node

amd epyc_7351_firmwareRange<naplespi_1.0.0.h

AND

amd epyc_7351Match-

Node

amd epyc_7351p_firmwareRange<naplespi_1.0.0.h

AND

amd epyc_7351pMatch-

Node

amd epyc_7371_firmwareRange<naplespi_1.0.0.h

AND

amd epyc_7371Match-

Node

amd epyc_7401_firmwareRange<naplespi_1.0.0.h

AND

amd epyc_7401Match-

Node

amd epyc_7401p_firmwareRange<naplespi_1.0.0.h

AND

amd epyc_7401pMatch-

Node

amd epyc_7451_firmwareRange<naplespi_1.0.0.h

AND

amd epyc_7451Match-

Node

amd epyc_7501_firmwareRange<naplespi_1.0.0.h

AND

amd epyc_7501Match-

Node

amd epyc_7551_firmwareRange<naplespi_1.0.0.h

AND

amd epyc_7551Match-

Node

amd epyc_7551p_firmwareRange<naplespi_1.0.0.h

AND

amd epyc_7551pMatch-

Node

amd epyc_7601_firmwareRange<naplespi_1.0.0.h

AND

amd epyc_7601Match-

Node

amd epyc_7232p_firmwareRange<romepi_1.0.0.d

AND

amd epyc_7232pMatch-

Node

amd epyc_7252_firmwareRange<romepi_1.0.0.d

AND

amd epyc_7252Match-

Node

amd epyc_7262_firmwareRange<romepi_1.0.0.d

AND

amd epyc_7262Match-

Node

amd epyc_7272_firmwareRange<romepi_1.0.0.d

AND

amd epyc_7272Match-

Node

amd epyc_7282_firmwareRange<romepi_1.0.0.d

AND

amd epyc_7282Match-

Node

amd epyc_7302_firmwareRange<romepi_1.0.0.d

AND

amd epyc_7302Match-

Node

amd epyc_7302p_firmwareRange<romepi_1.0.0.d

AND

amd epyc_7302pMatch-

Node

amd epyc_7352_firmwareRange<romepi_1.0.0.d

AND

amd epyc_7352Match-

Node

amd epyc_7402_firmwareRange<romepi_1.0.0.d

AND

amd epyc_7402Match-

Node

amd epyc_7402p_firmwareRange<romepi_1.0.0.d

AND

amd epyc_7402pMatch-

Node

amd epyc_7452_firmwareRange<romepi_1.0.0.d

AND

amd epyc_7452Match-

Node

amd epyc_7502_firmwareRange<romepi_1.0.0.d

AND

amd epyc_7502Match-

Node

amd epyc_7502p_firmwareRange<romepi_1.0.0.d

AND

amd epyc_7502pMatch-

Node

amd epyc_7532_firmwareRange<romepi_1.0.0.d

AND

amd epyc_7532Match-

Node

amd epyc_7542_firmwareRange<romepi_1.0.0.d

AND

amd epyc_7542Match-

Node

amd epyc_7552_firmwareRange<romepi_1.0.0.d

AND

amd epyc_7552Match-

Node

amd epyc_7642_firmwareRange<romepi_1.0.0.d

AND

amd epyc_7642Match-

Node

amd epyc_7662_firmwareRange<romepi_1.0.0.d

AND

amd epyc_7662Match-

Node

amd epyc_7702_firmwareRange<romepi_1.0.0.d

AND

amd epyc_7702Match-

Node

amd epyc_7702p_firmwareRange<romepi_1.0.0.d

AND

amd epyc_7702pMatch-

Node

amd epyc_7742_firmwareRange<romepi_1.0.0.d

AND

amd epyc_7742Match-

Node

amd epyc_7f32_firmwareRange<romepi_1.0.0.d

AND

amd epyc_7f32Match-

Node

amd epyc_7f52_firmwareRange<romepi_1.0.0.d

AND

amd epyc_7f52Match-

Node

amd epyc_7f72_firmwareRange<romepi_1.0.0.d

AND

amd epyc_7f72Match-

Node

amd epyc_7h12_firmwareRange<romepi_1.0.0.d

AND

amd epyc_7h12Match-

Node

amd epyc_7763_firmwareRange<milanpi_1.0.0.7

AND

amd epyc_7763Match-

Node

amd epyc_7713p_firmwareRange<milanpi_1.0.0.7

AND

amd epyc_7713pMatch-

Node

amd epyc_7713_firmwareRange<milanpi_1.0.0.7

AND

amd epyc_7713Match-

Node

amd epyc_7663p_firmwareRange<milanpi_1.0.0.7

AND

amd epyc_7663pMatch-

Node

amd epyc_7663_firmwareRange<milanpi_1.0.0.7

AND

amd epyc_7663Match-

Node

amd epyc_7643p_firmwareRange<milanpi_1.0.0.7

AND

amd epyc_7643pMatch-

Node

amd epyc_7773x_firmwareRange<milanpi_1.0.0.7

AND

amd epyc_7773xMatch-

Node

amd epyc_7643_firmwareRange<milanpi_1.0.0.7

AND

amd epyc_7643Match-

Node

amd epyc_7573x_firmwareRange<milanpi_1.0.0.7

AND

amd epyc_7573xMatch-

Node

amd epyc_75f3_firmwareRange<milanpi_1.0.0.7

AND

amd epyc_75f3Match-

Node

amd epyc_7543p_firmwareRange<milanpi_1.0.0.7

AND

amd epyc_7543pMatch-

Node

amd epyc_7543_firmwareRange<milanpi_1.0.0.7

AND

amd epyc_7543Match-

Node

amd epyc_7513_firmwareRange<milanpi_1.0.0.7

AND

amd epyc_7513Match-

Node

amd epyc_7473x_firmwareRange<milanpi_1.0.0.7

AND

amd epyc_7473xMatch-

Node

amd epyc_7453_firmwareRange<milanpi_1.0.0.7

AND

amd epyc_7453Match-

Node

amd epyc_74f3_firmwareRange<milanpi_1.0.0.7

AND

amd epyc_74f3Match-

Node

amd epyc_7443p_firmwareRange<milanpi_1.0.0.7

AND

amd epyc_7443pMatch-

Node

amd epyc_7443_firmwareRange<milanpi_1.0.0.7

AND

amd epyc_7443Match-

Node

amd epyc_7413_firmwareRange<milanpi_1.0.0.7

AND

amd epyc_7413Match-

Node

amd epyc_7373x_firmwareRange<milanpi_1.0.0.7

AND

amd epyc_7373xMatch-

Node

amd epyc_73f3_firmwareRange<milanpi_1.0.0.7

AND

amd epyc_73f3Match-

Node

amd epyc_7343_firmwareRange<milanpi_1.0.0.7

AND

amd epyc_7343Match-

Node

amd epyc_7313p_firmwareRange<milanpi_1.0.0.7

AND

amd epyc_7313pMatch-

Node

amd epyc_7313_firmwareRange<milanpi_1.0.0.7

AND

amd epyc_7313Match-

Node

amd epyc_7303p_firmwareRange<milanpi_1.0.0.7

AND

amd epyc_7303pMatch-

Node

amd epyc_7303_firmwareRange<milanpi_1.0.0.7

AND

amd epyc_7303Match-

Node

amd epyc_72f3_firmwareRange<milanpi_1.0.0.7

AND

amd epyc_72f3Match-

Node

amd epyc_7203p_firmwareRange<milanpi_1.0.0.7

AND

amd epyc_7203pMatch-

Node

amd epyc_7203_firmwareRange<milanpi_1.0.0.7

AND

amd epyc_7203Match-

Node

amd athlon_pro_300ge_firmwareMatch-

AND

amd athlon_pro_300geMatch-

Node

amd athlon_gold_pro_3150ge_firmwareMatch-

AND

amd athlon_gold_pro_3150geMatch-

Node

amd athlon_gold_3150g_firmwareMatch-

AND

amd athlon_gold_3150gMatch-

Node

amd athlon_gold_pro_3150g_firmwareMatch-

AND

amd athlon_gold_pro_3150gMatch-

Node

amd ryzen_threadripper_2990wx_firmwareRange<summitpi-sp3r2_1.1.0.6

AND

amd ryzen_threadripper_2990wxMatch-

Node

amd ryzen_threadripper_2970wx_firmwareRange<summitpi-sp3r2_1.1.0.6

AND

amd ryzen_threadripper_2970wxMatch-

Node

amd ryzen_threadripper_2950x_firmwareRange<summitpi-sp3r2_1.1.0.6

AND

amd ryzen_threadripper_2950xMatch-

Node

amd ryzen_threadripper_2920x_firmwareRange<summitpi-sp3r2_1.1.0.6

AND

amd ryzen_threadripper_2920xMatch-

Node

amd ryzen_7_3780u_firmwareRange<picassopi-fp5_1.0.0.e

AND

amd ryzen_7_3780uMatch-

Node

amd ryzen_7_3750h_firmwareRange<picassopi-fp5_1.0.0.e

AND

amd ryzen_7_3750hMatch-

Node

amd ryzen_7_3700c_firmwareRange<picassopi-fp5_1.0.0.e

AND

amd ryzen_7_3700cMatch-

Node

amd ryzen_7_3700u_firmwareRange<picassopi-fp5_1.0.0.e

AND

amd ryzen_7_3700uMatch-

Node

amd ryzen_5_3580u_firmwareRange<picassopi-fp5_1.0.0.e

AND

amd ryzen_5_3580uMatch-

Node

amd ryzen_5_3550h_firmwareRange<picassopi-fp5_1.0.0.e

AND

amd ryzen_5_3550hMatch-

Node

amd ryzen_5_3500c_firmwareRange<picassopi-fp5_1.0.0.e

AND

amd ryzen_5_3500cMatch-

Node

amd ryzen_5_3500u_firmwareRange<picassopi-fp5_1.0.0.e

AND

amd ryzen_5_3500uMatch-

Node

amd ryzen_5_3450u_firmwareRange<picassopi-fp5_1.0.0.e

AND

amd ryzen_5_3450uMatch-

Node

amd ryzen_3_3350u_firmwareRange<picassopi-fp5_1.0.0.e

AND

amd ryzen_3_3350uMatch-

Node

amd ryzen_3_3300u_firmwareRange<picassopi-fp5_1.0.0.e

AND

amd ryzen_3_3300uMatch-

Node

amd ryzen_3_3250u_firmwareRange<picassopi-fp5_1.0.0.e

AND

amd ryzen_3_3250uMatch-

Node

amd ryzen_3_3250c_firmwareRange<picassopi-fp5_1.0.0.e

AND

amd ryzen_3_3250cMatch-

Node

amd ryzen_3_3200u_firmwareRange<picassopi-fp5_1.0.0.e

AND

amd ryzen_3_3200uMatch-

Node

amd amd_3015e_firmwareRange<pollockpi-ft5_1.0.0.4

AND

amd amd_3015eMatch-

Node

amd amd_3015ce_firmwareRange<pollockpi-ft5_1.0.0.4

AND

amd amd_3015ceMatch-

[
  {
    "defaultStatus": "unaffected",
    "packageName": "PI",
    "platforms": [
      "x86"
    ],
    "product": "Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics “Picasso” AM4",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "packageName": "PI",
    "platforms": [
      "x86"
    ],
    "product": "Ryzen™ Threadripper™ 2000 Series Processors “Colfax”",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "packageName": "PI",
    "platforms": [
      "x86"
    ],
    "product": "Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Dali”/”Dali” FP5",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "packageName": "PI",
    "platforms": [
      "x86"
    ],
    "product": "Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics   “Pollock”",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "packageName": "PI",
    "platforms": [
      "x86"
    ],
    "product": "Ryzen™ 3000 Series Mobile Processor with Radeon™ Graphics “Picasso” FP5",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "packageName": "PI",
    "platforms": [
      "x86"
    ],
    "product": "1st Gen AMD EPYC™ Processors",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "packageName": "PI",
    "platforms": [
      "x86"
    ],
    "product": "2nd Gen AMD EPYC™ Processors",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "packageName": "PI",
    "platforms": [
      "x86"
    ],
    "product": "3rd Gen AMD EPYC™ Processors",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "AMD EPYC™ Embedded 3000",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "AMD EPYC™ Embedded 7002",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "AMD EPYC™ Embedded 7003",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "AMD Ryzen™ Embedded R1000",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "AMD Ryzen™ Embedded R2000",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "AMD Ryzen™ Embedded V1000",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various"
      }
    ]
  }
]

Source	Link
amd	www.amd.com/en/corporate/product-security/bulletin/AMD-SB-5001
amd	www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3002
amd	www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4002

17 Jun 2026 05:30Current

6.1Medium risk

Vulners AI Score6.1

CVSS 3.13.3 - 5.7

EPSS0.00257

SSVC

CWE-367