CVE-2023-20530

🗓️ 10 Jan 2023 20:57:06Reported by AMDType

Insufficient input validation of BIOS mailbox messages in SMU may result in out-of-bounds memory reads potentially resulting in a denial of service

Reporter	Title	Published	Views	Family All 12
Amd	AMD Server Vulnerabilities – January 2023	10 Jan 202300:00	–	amd
BDU FSTEC	The vulnerability of the BIOS component of AMD processors allows a hacker to trigger a system failure.	15 Feb 202300:00	–	bdu_fstec
Circl	CVE-2023-20530	7 Apr 202518:46	–	circl
CNNVD	AMD System Management Unit(SMU) 输入验证错误漏洞	11 Jan 202300:00	–	cnnvd
Cvelist	CVE-2023-20530	10 Jan 202320:57	–	cvelist
EUVD	EUVD-2023-24709	3 Oct 202520:07	–	euvd
NCSC	Vulnerabilities fixed in Dell PowerEdge	13 Jan 202300:00	–	ncsc
NVD	CVE-2023-20530	11 Jan 202308:15	–	nvd
OSV	CVE-2023-20530	11 Jan 202308:15	–	osv
Prion	Input validation	11 Jan 202308:15	–	prion

NVD

Node

amd epyc_7003_firmwareRange<milanpi_1.0.0.5

AND

amd epyc_7003Match-

Node

amd epyc_72f3_firmwareRange<milanpi_1.0.0.5

AND

amd epyc_72f3Match-

Node

amd epyc_7313_firmwareRange<milanpi_1.0.0.5

AND

amd epyc_7313Match-

Node

amd epyc_7313p_firmwareRange<milanpi_1.0.0.5

AND

amd epyc_7313pMatch-

Node

amd epyc_7343_firmwareRange<milanpi_1.0.0.5

AND

amd epyc_7343Match-

Node

amd epyc_7373x_firmwareRange<milanpi_1.0.0.5

AND

amd epyc_7373xMatch-

Node

amd epyc_73f3_firmwareRange<milanpi_1.0.0.5

AND

amd epyc_73f3Match-

Node

amd epyc_7413_firmwareRange<milanpi_1.0.0.5

AND

amd epyc_7413Match-

Node

amd epyc_7443_firmwareRange<milanpi_1.0.0.5

AND

amd epyc_7443Match-

Node

amd epyc_7443p_firmwareRange<milanpi_1.0.0.5

AND

amd epyc_7443pMatch-

Node

amd epyc_7453_firmwareRange<milanpi_1.0.0.5

AND

amd epyc_7453Match-

Node

amd epyc_74f3_firmwareRange<milanpi_1.0.0.5

AND

amd epyc_74f3Match-

Node

amd epyc_7513_firmwareRange<milanpi_1.0.0.5

AND

amd epyc_7513Match-

Node

amd epyc_7543_firmwareRange<milanpi_1.0.0.5

AND

amd epyc_7543Match-

Node

amd epyc_7543p_firmwareRange<milanpi_1.0.0.5

AND

amd epyc_7543pMatch-

Node

amd epyc_7573x_firmwareRange<milanpi_1.0.0.5

AND

amd epyc_7573xMatch-

Node

amd epyc_75f3_firmwareRange<milanpi_1.0.0.5

AND

amd epyc_75f3Match-

Node

amd epyc_7643_firmwareRange<milanpi_1.0.0.5

AND

amd epyc_7643Match-

Node

amd epyc_7663_firmwareRange<milanpi_1.0.0.5

AND

amd epyc_7663Match-

Node

amd epyc_7713_firmwareRange<milanpi_1.0.0.5

AND

amd epyc_7713Match-

Node

amd epyc_7713p_firmwareRange<milanpi_1.0.0.5

AND

amd epyc_7713pMatch-

Node

amd epyc_7743_firmwareRange<milanpi_1.0.0.5

AND

amd epyc_7743Match-

Node

amd epyc_7763_firmwareRange<milanpi_1.0.0.5

AND

amd epyc_7763Match-

Node

amd epyc_7773x_firmwareRange<milanpi_1.0.0.5

AND

amd epyc_7773xMatch-

[
  {
    "defaultStatus": "unaffected",
    "packageName": "AGESA",
    "platforms": [
      "x86"
    ],
    "product": "3rd Gen EPYC",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various "
      }
    ]
  }
]

Source	Link
amd	www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032

07 Apr 2025 19:15Current

7.6High risk

Vulners AI Score7.6

CVSS 3.17.5

EPSS0.00616

SSVC

CWE-20