CVE-2023-20527

🗓️ 10 Jan 2023 20:57:02Reported by AMDType

Improper input validation in ASP Bootloader allows privileged attacker to read memory out-of-bounds

Reporter	Title	Published	Views	Family All 11
Amd	AMD Server Vulnerabilities – January 2023	10 Jan 202300:00	–	amd
BDU FSTEC	The vulnerability of the Bootloader component of AMD processors allows a hacker to trigger a system failure.	1 Mar 202300:00	–	bdu_fstec
CNNVD	AMD Secure Processor(ASP) 输入验证错误漏洞	11 Jan 202300:00	–	cnnvd
Cvelist	CVE-2023-20527	10 Jan 202320:57	–	cvelist
EUVD	EUVD-2023-24706	3 Oct 202520:07	–	euvd
NCSC	Vulnerabilities fixed in Dell PowerEdge	13 Jan 202300:00	–	ncsc
NVD	CVE-2023-20527	11 Jan 202308:15	–	nvd
OSV	CVE-2023-20527	11 Jan 202308:15	–	osv
Prion	Design/Logic Flaw	11 Jan 202308:15	–	prion
Positive Technologies	PT-2023-1474 · Amd · Amd Bootloader	10 Jan 202300:00	–	ptsecurity

NVD

Node

amd epyc_7h12_firmwareRange<romepi_1.0.0.c

AND

amd epyc_7h12Match-

Node

amd epyc_7f72_firmwareRange<romepi_1.0.0.c

AND

amd epyc_7f72Match-

Node

amd epyc_7f52_firmwareRange<romepi_1.0.0.c

AND

amd epyc_7f52Match-

Node

amd epyc_7f32_firmwareRange<romepi_1.0.0.c

AND

amd epyc_7f32Match-

Node

amd epyc_7742_firmwareRange<romepi_1.0.0.c

AND

amd epyc_7742Match-

Node

amd epyc_7702p_firmwareRange<romepi_1.0.0.c

AND

amd epyc_7702pMatch-

Node

amd epyc_7702_firmwareRange<romepi_1.0.0.c

AND

amd epyc_7702Match-

Node

amd epyc_7662_firmwareRange<romepi_1.0.0.c

AND

amd epyc_7662Match-

Node

amd epyc_7642_firmwareRange<romepi_1.0.0.c

AND

amd epyc_7642Match-

Node

amd epyc_7552_firmwareRange<romepi_1.0.0.c

AND

amd epyc_7552Match-

Node

amd epyc_7542_firmwareRange<romepi_1.0.0.c

AND

amd epyc_7542Match-

Node

amd epyc_7532_firmwareRange<romepi_1.0.0.c

AND

amd epyc_7532Match-

Node

amd epyc_7502p_firmwareRange<romepi_1.0.0.c

AND

amd epyc_7502pMatch-

Node

amd epyc_7502_firmwareRange<romepi_1.0.0.c

AND

amd epyc_7502Match-

Node

amd epyc_7452_firmwareRange<romepi_1.0.0.c

AND

amd epyc_7452Match-

Node

amd epyc_7402_firmwareRange<romepi_1.0.0.c

AND

amd epyc_7402Match-

Node

amd epyc_7402p_firmwareRange<romepi_1.0.0.c

AND

amd epyc_7402pMatch-

Node

amd epyc_7352_firmwareRange<romepi_1.0.0.c

AND

amd epyc_7352Match-

Node

amd epyc_7302p_firmwareRange<romepi_1.0.0.c

AND

amd epyc_7302pMatch-

Node

amd epyc_7302_firmwareRange<romepi_1.0.0.c

AND

amd epyc_7302Match-

Node

amd epyc_7282_firmwareRange<romepi_1.0.0.c

AND

amd epyc_7282Match-

Node

amd epyc_7272_firmwareRange<romepi_1.0.0.c

AND

amd epyc_7272Match-

Node

amd epyc_7262_firmwareRange<romepi_1.0.0.c

AND

amd epyc_7262Match-

Node

amd epyc_7252_firmwareRange<romepi_1.0.0.c

AND

amd epyc_7252Match-

Node

amd epyc_7232p_firmwareRange<romepi_1.0.0.c

AND

amd epyc_7232pMatch-

Node

amd epyc_7002_firmwareRange<romepi_1.0.0.c

AND

amd epyc_7002Match-

Node

amd epyc_7003_firmwareRange<milanpi_1.0.0.5

AND

amd epyc_7003Match-

Node

amd epyc_72f3_firmwareRange<milanpi_1.0.0.5

AND

amd epyc_72f3Match-

Node

amd epyc_7313_firmwareRange<milanpi_1.0.0.5

AND

amd epyc_7313Match-

Node

amd epyc_7313p_firmwareRange<milanpi_1.0.0.5

AND

amd epyc_7313pMatch-

Node

amd epyc_7343_firmwareRange<milanpi_1.0.0.5

AND

amd epyc_7343Match-

Node

amd epyc_7373x_firmwareRange<milanpi_1.0.0.5

AND

amd epyc_7373xMatch-

Node

amd epyc_73f3_firmwareRange<milanpi_1.0.0.5

AND

amd epyc_73f3Match-

Node

amd epyc_7413_firmwareRange<milanpi_1.0.0.5

AND

amd epyc_7413Match-

Node

amd epyc_7443_firmwareRange<milanpi_1.0.0.5

AND

amd epyc_7443Match-

Node

amd epyc_7443p_firmwareRange<milanpi_1.0.0.5

AND

amd epyc_7443pMatch-

Node

amd epyc_7453_firmwareRange<milanpi_1.0.0.5

AND

amd epyc_7453Match-

Node

amd epyc_74f3_firmwareRange<milanpi_1.0.0.5

AND

amd epyc_74f3Match-

Node

amd epyc_7513_firmwareRange<milanpi_1.0.0.5

AND

amd epyc_7513Match-

Node

amd epyc_7543_firmwareRange<milanpi_1.0.0.5

AND

amd epyc_7543Match-

Node

amd epyc_7543p_firmwareRange<milanpi_1.0.0.5

AND

amd epyc_7543pMatch-

Node

amd epyc_7573x_firmwareRange<milanpi_1.0.0.5

AND

amd epyc_7573xMatch-

Node

amd epyc_75f3_firmwareRange<milanpi_1.0.0.5

AND

amd epyc_75f3Match-

Node

amd epyc_7643_firmwareRange<milanpi_1.0.0.5

AND

amd epyc_7643Match-

Node

amd epyc_7663_firmwareRange<milanpi_1.0.0.5

AND

amd epyc_7663Match-

Node

amd epyc_7713_firmwareRange<milanpi_1.0.0.5

AND

amd epyc_7713Match-

Node

amd epyc_7713p_firmwareRange<milanpi_1.0.0.5

AND

amd epyc_7713pMatch-

Node

amd epyc_7743_firmwareRange<milanpi_1.0.0.5

AND

amd epyc_7743Match-

Node

amd epyc_7763_firmwareRange<milanpi_1.0.0.5

AND

amd epyc_7763Match-

Node

amd epyc_7773x_firmwareRange<milanpi_1.0.0.5

AND

amd epyc_7773xMatch-

Node

amd epyc_7001_firmwareRange<naplespi_1.0.0.g

AND

amd epyc_7001Match-

Node

amd epyc_7251_firmwareRange<naplespi_1.0.0.g

AND

amd epyc_7251Match-

Node

amd epyc_7261_firmwareRange<naplespi_1.0.0.g

AND

amd epyc_7261Match-

Node

amd epyc_7281_firmwareRange<naplespi_1.0.0.g

AND

amd epyc_7281Match-

Node

amd epyc_7301_firmwareRange<naplespi_1.0.0.g

AND

amd epyc_7301Match-

Node

amd epyc_7351_firmwareRange<naplespi_1.0.0.g

AND

amd epyc_7351Match-

Node

amd epyc_7371_firmwareRange<naplespi_1.0.0.g

AND

amd epyc_7371Match-

Node

amd epyc_7401_firmwareRange<naplespi_1.0.0.g

AND

amd epyc_7401Match-

Node

amd epyc_7401p_firmwareRange<naplespi_1.0.0.g

AND

amd epyc_7401pMatch-

Node

amd epyc_7451_firmwareRange<naplespi_1.0.0.g

AND

amd epyc_7451Match-

Node

amd epyc_7501_firmwareRange<naplespi_1.0.0.g

AND

amd epyc_7501Match-

Node

amd epyc_7551_firmwareRange<naplespi_1.0.0.g

AND

amd epyc_7551Match-

Node

amd epyc_7551p_firmwareRange<naplespi_1.0.0.g

AND

amd epyc_7551pMatch-

Node

amd epyc_7601_firmwareRange<naplespi_1.0.0.g

AND

amd epyc_7601Match-

[
  {
    "defaultStatus": "unaffected",
    "packageName": "AGESA",
    "platforms": [
      "x86"
    ],
    "product": "1st Gen EPYC",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various "
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "packageName": "AGESA",
    "platforms": [
      "x86"
    ],
    "product": "2nd Gen EPYC",
    "vendor": " AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various "
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "packageName": "AGESA",
    "platforms": [
      "x86"
    ],
    "product": "3rd Gen EPYC",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various "
      }
    ]
  }
]

Source	Link
amd	www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032

07 Apr 2025 16:15Current

6.7Medium risk

Vulners AI Score6.7

CVSS 3.16.5

EPSS0.00595

SSVC

CWE-20