Lucene search

[email protected]NVD:CVE-2023-20526

HistoryNov 14, 2023 - 7:15 p.m.

CVE-2023-20526

2023-11-1419:15:15

[email protected]

web.nvd.nist.gov

input validation

asp bootloader

memory exposure

loss of confidentiality

physical access

CVSS3

4.6

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.001

Percentile

20.7%

JSON

Insufficient input validation in the ASP Bootloader may enable a privileged attacker with physical access to expose the contents of ASP memory potentially leading to a loss of confidentiality.

Affected configurations

Nvd

Node

amdepyc_7001_firmwareRange<naplespi_1.0.0.h

AND

amdepyc_7001Match-

Node

amdepyc_7251_firmwareRange<naplespi_1.0.0.h

AND

amdepyc_7251Match-

Node

amdepyc_7261_firmwareRange<naplespi_1.0.0.h

AND

amdepyc_7261Match-

Node

amdepyc_7281_firmwareRange<naplespi_1.0.0.h

AND

amdepyc_7281Match-

Node

amdepyc_7301_firmwareRange<naplespi_1.0.0.h

AND

amdepyc_7301Match-

Node

amdepyc_7351_firmwareRange<naplespi_1.0.0.h

AND

amdepyc_7351Match-

Node

amdepyc_7351p_firmwareRange<naplespi_1.0.0.h

AND

amdepyc_7351pMatch-

Node

amdepyc_7371_firmwareRange<naplespi_1.0.0.h

AND

amdepyc_7371Match-

Node

amdepyc_7401_firmwareRange<naplespi_1.0.0.h

AND

amdepyc_7401Match-

Node

amdepyc_7401p_firmwareRange<naplespi_1.0.0.h

AND

amdepyc_7401pMatch-

Node

amdepyc_7451_firmwareRange<naplespi_1.0.0.h

AND

amdepyc_7451Match-

Node

amdepyc_7501_firmwareRange<naplespi_1.0.0.h

AND

amdepyc_7501Match-

Node

amdepyc_7551_firmwareRange<naplespi_1.0.0.h

AND

amdepyc_7551Match-

Node

amdepyc_7551p_firmwareRange<naplespi_1.0.0.h

AND

amdepyc_7551pMatch-

Node

amdepyc_7601_firmwareRange<naplespi_1.0.0.h

AND

amdepyc_7601Match-

Node

amdepyc_7232p_firmwareRange<romepi_1.0.0.d

AND

amdepyc_7232pMatch-

Node

amdepyc_7252_firmwareRange<romepi_1.0.0.d

AND

amdepyc_7252Match-

Node

amdepyc_7262_firmwareRange<romepi_1.0.0.d

AND

amdepyc_7262Match-

Node

amdepyc_7272_firmwareRange<romepi_1.0.0.d

AND

amdepyc_7272Match-

Node

amdepyc_7282_firmwareRange<romepi_1.0.0.d

AND

amdepyc_7282Match-

Node

amdepyc_7302_firmwareRange<romepi_1.0.0.d

AND

amdepyc_7302Match-

Node

amdepyc_7302p_firmwareRange<romepi_1.0.0.d

AND

amdepyc_7302pMatch-

Node

amdepyc_7352_firmwareRange<romepi_1.0.0.d

AND

amdepyc_7352Match-

Node

amdepyc_7402_firmwareRange<romepi_1.0.0.d

AND

amdepyc_7402Match-

Node

amdepyc_7402p_firmwareRange<romepi_1.0.0.d

AND

amdepyc_7402pMatch-

Node

amdepyc_7452_firmwareRange<romepi_1.0.0.d

AND

amdepyc_7452Match-

Node

amdepyc_7502_firmwareRange<romepi_1.0.0.d

AND

amdepyc_7502Match-

Node

amdepyc_7502p_firmwareRange<romepi_1.0.0.d

AND

amdepyc_7502pMatch-

Node

amdepyc_7532_firmwareRange<romepi_1.0.0.d

AND

amdepyc_7532Match-

Node

amdepyc_7542_firmwareRange<romepi_1.0.0.d

AND

amdepyc_7542Match-

Node

amdepyc_7552_firmwareRange<romepi_1.0.0.d

AND

amdepyc_7552Match-

Node

amdepyc_7642_firmwareRange<romepi_1.0.0.d

AND

amdepyc_7642Match-

Node

amdepyc_7662_firmwareRange<romepi_1.0.0.d

AND

amdepyc_7662Match-

Node

amdepyc_7702_firmwareRange<romepi_1.0.0.d

AND

amdepyc_7702Match-

Node

amdepyc_7702p_firmwareRange<romepi_1.0.0.d

AND

amdepyc_7702pMatch-

Node

amdepyc_7742_firmwareRange<romepi_1.0.0.d

AND

amdepyc_7742Match-

Node

amdepyc_7f32_firmwareRange<romepi_1.0.0.d

AND

amdepyc_7f32Match-

Node

amdepyc_7f52_firmwareRange<romepi_1.0.0.d

AND

amdepyc_7f52Match-

Node

amdepyc_7f72_firmwareRange<romepi_1.0.0.d

AND

amdepyc_7f72Match-

Node

amdepyc_7h12_firmwareRange<romepi_1.0.0.d

AND

amdepyc_7h12Match-

Node

amdepyc_7763_firmwareRange<milanpi_1.0.0.5

AND

amdepyc_7763Match-

Node

amdepyc_7713p_firmwareRange<milanpi_1.0.0.5

AND

amdepyc_7713pMatch-

Node

amdepyc_7713_firmwareRange<milanpi_1.0.0.5

AND

amdepyc_7713Match-

Node

amdepyc_7663p_firmwareRange<milanpi_1.0.0.5

AND

amdepyc_7663pMatch-

Node

amdepyc_7663_firmwareRange<milanpi_1.0.0.5

AND

amdepyc_7663Match-

Node

amdepyc_7643p_firmwareRange<milanpi_1.0.0.5

AND

amdepyc_7643pMatch-

Node

amdepyc_7773x_firmwareRange<milanpi_1.0.0.5

AND

amdepyc_7773xMatch-

Node

amdepyc_7643_firmwareRange<milanpi_1.0.0.5

AND

amdepyc_7643Match-

Node

amdepyc_7573x_firmwareRange<milanpi_1.0.0.5

AND

amdepyc_7573xMatch-

Node

amdepyc_75f3_firmwareRange<milanpi_1.0.0.5

AND

amdepyc_75f3Match-

Node

amdepyc_7543p_firmwareRange<milanpi_1.0.0.5

AND

amdepyc_7543pMatch-

Node

amdepyc_7543_firmwareRange<milanpi_1.0.0.5

AND

amdepyc_7543Match-

Node

amdepyc_7513_firmwareRange<milanpi_1.0.0.5

AND

amdepyc_7513Match-

Node

amdepyc_7473x_firmwareRange<milanpi_1.0.0.5

AND

amdepyc_7473xMatch-

Node

amdepyc_7453_firmwareRange<milanpi_1.0.0.5

AND

amdepyc_7453Match-

Node

amdepyc_74f3_firmwareRange<milanpi_1.0.0.5

AND

amdepyc_74f3Match-

Node

amdepyc_7443p_firmwareRange<milanpi_1.0.0.5

AND

amdepyc_7443pMatch-

Node

amdepyc_7443_firmwareRange<milanpi_1.0.0.5

AND

amdepyc_7443Match-

Node

amdepyc_7413_firmwareRange<milanpi_1.0.0.5

AND

amdepyc_7413Match-

Node

amdepyc_7373x_firmwareRange<milanpi_1.0.0.5

AND

amdepyc_7373xMatch-

Node

amdepyc_73f3_firmwareRange<milanpi_1.0.0.5

AND

amdepyc_73f3Match-

Node

amdepyc_7343_firmwareRange<milanpi_1.0.0.5

AND

amdepyc_7343Match-

Node

amdepyc_7313p_firmwareRange<milanpi_1.0.0.5

AND

amdepyc_7313pMatch-

Node

amdepyc_7313_firmwareRange<milanpi_1.0.0.5

AND

amdepyc_7313Match-

Node

amdepyc_7303p_firmwareRange<milanpi_1.0.0.5

AND

amdepyc_7303pMatch-

Node

amdepyc_7303_firmwareRange<milanpi_1.0.0.5

AND

amdepyc_7303Match-

Node

amdepyc_72f3_firmwareRange<milanpi_1.0.0.5

AND

amdepyc_72f3Match-

Node

amdepyc_7203p_firmwareRange<milanpi_1.0.0.5

AND

amdepyc_7203pMatch-

Node

amdepyc_7203_firmwareRange<milanpi_1.0.0.5

AND

amdepyc_7203Match-

Node

amdryzen_threadripper_2990wx_firmwareRange<summitpi-sp3r2_1.1.0.7

AND

amdryzen_threadripper_2990wxMatch-

Node

amdryzen_threadripper_2970wx_firmwareRange<summitpi-sp3r2_1.1.0.7

AND

amdryzen_threadripper_2970wxMatch-

Node

amdryzen_threadripper_2950x_firmwareRange<summitpi-sp3r2_1.1.0.7

AND

amdryzen_threadripper_2950xMatch-

Node

amdryzen_threadripper_2920x_firmwareRange<summitpi-sp3r2_1.1.0.7

AND

amdryzen_threadripper_2920xMatch-

VendorProductVersionCPE
amdepyc_7001_firmware*cpe:2.3:o:amd:epyc_7001_firmware:*:*:*:*:*:*:*:*
amdepyc_7001-cpe:2.3:h:amd:epyc_7001:-:*:*:*:*:*:*:*
amdepyc_7251_firmware*cpe:2.3:o:amd:epyc_7251_firmware:*:*:*:*:*:*:*:*
amdepyc_7251-cpe:2.3:h:amd:epyc_7251:-:*:*:*:*:*:*:*
amdepyc_7261_firmware*cpe:2.3:o:amd:epyc_7261_firmware:*:*:*:*:*:*:*:*
amdepyc_7261-cpe:2.3:h:amd:epyc_7261:-:*:*:*:*:*:*:*
amdepyc_7281_firmware*cpe:2.3:o:amd:epyc_7281_firmware:*:*:*:*:*:*:*:*
amdepyc_7281-cpe:2.3:h:amd:epyc_7281:-:*:*:*:*:*:*:*
amdepyc_7301_firmware*cpe:2.3:o:amd:epyc_7301_firmware:*:*:*:*:*:*:*:*
amdepyc_7301-cpe:2.3:h:amd:epyc_7301:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
amd	epyc_7001_firmware	*	cpe:2.3:o:amd:epyc_7001_firmware::::::::
amd	epyc_7001	-	cpe:2.3:h:amd:epyc_7001:-:::::::*
amd	epyc_7251_firmware	*	cpe:2.3:o:amd:epyc_7251_firmware::::::::
amd	epyc_7251	-	cpe:2.3:h:amd:epyc_7251:-:::::::*
amd	epyc_7261_firmware	*	cpe:2.3:o:amd:epyc_7261_firmware::::::::
amd	epyc_7261	-	cpe:2.3:h:amd:epyc_7261:-:::::::*
amd	epyc_7281_firmware	*	cpe:2.3:o:amd:epyc_7281_firmware::::::::
amd	epyc_7281	-	cpe:2.3:h:amd:epyc_7281:-:::::::*
amd	epyc_7301_firmware	*	cpe:2.3:o:amd:epyc_7301_firmware::::::::
amd	epyc_7301	-	cpe:2.3:h:amd:epyc_7301:-:::::::*