CVE-2023-20524

Summary

An attacker with a compromised ASP could possibly send malformed commands to an ASP on another CPU, resulting in an out of bounds write, potentially leading to a loss a loss of integrity.

Affected Software

VendorProductVersion RangeStatus
AMD2nd Gen AMD EPYC™variousaffected
AMD3rd Gen AMD EPYC™variousaffected

Weaknesses

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: yes
    • Technical Impact: partial

References