CVE-2023-20520: critical vulnerability in AMD 1st Gen AMD EPYC™
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
28Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 9.8epss 0.8%
In short
A flaw in ASP Bootloader's access control allows attackers to overflow a buffer on the stack and corrupt memory, potentially executing malicious code on the affected system.
Technical detail
Stack-based buffer overflow (CWE-787) in ASP Bootloader due to improper access control, enabling local or adjacent attackers to corrupt the return address and achieve arbitrary code execution with no authentication required.
Summary generated and translated by AI from the official description.
Improper access control settings in ASP
Bootloader may allow an attacker to corrupt the return address causing a
stack-based buffer overrun potentially leading to arbitrary code execution.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Related CVEs — AMD 1st Gen AMD EPYC™
In the same product, most dangerous first.