Skip to content
CVE PROGRAM SOURCE RECORD7.1 High

CVE-2023-20587

Improper

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
AMD

Description

Improper Access Control in System Management Mode (SMM) may allow an attacker access to the SPI flash potentially leading to arbitrary code execution.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

AMD 3rd Gen AMD EPYC™ Processors

Default version status: unaffected

  • various affected

AMD 4th Gen AMD EPYC™ Processors

Default version status: unaffected

  • variousaffected

AMD 1st Gen AMD EPYC™ Processors

Default version status: affected

  • variousaffected

AMD 2nd Gen AMD EPYC™ Processors

Default version status: unaffected

  • variousaffected

AMD AMD EPYC(TM) Embedded 3000

Default version status: unaffected

  • variousaffected

AMD AMD EPYC(TM) Embedded 7002

Default version status: unaffected

  • variousaffected

AMD AMD EPYC(TM) Embedded 7003

Default version status: unaffected

  • variousaffected

AMD AMD EPYC(TM) Embedded 9003

Default version status: unaffected

  • variousaffected

References