CVE-2023-20587

2024-02-1320:15:52

[email protected]

web.nvd.nist.gov

cve-2023-20587

access control

system management mode

spi flash

arbitrary code execution

7 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

JSON

Improper
Access Control in System Management Mode (SMM) may allow an attacker access to
the SPI flash potentially leading to arbitrary code execution.

References

www.amd.com/en/corporate/product-security/bulletin/AMD-SB-7009