CVE-2023-20578

published 2024-08-13

CVE-2023-20578: A TOCTOU (Time-Of-Check-Time-Of-Use) in SMM may allow an attacker with ring0 privileges and access to the BIOS menu or UEFI shell to modify the communications…

medium 6.4 CVSS 3.1

AV L AC H PR H UI N S U C H I H A H

A TOCTOU (Time-Of-Check-Time-Of-Use) in SMM may allow
an attacker with ring0 privileges and access to the
BIOS menu or UEFI shell to modify the communications buffer potentially
resulting in arbitrary code execution.

Affected

105 ranges · showing 25

Vendor	Product	Version range	Fixed in
amd	epyc_7001_firmware	< naplespi_1.0.0.k	naplespi_1.0.0.k
amd	epyc_7203_firmware	< milanpi_1.0.0.5	milanpi_1.0.0.5
amd	epyc_7203p_firmware	< milanpi_1.0.0.5	milanpi_1.0.0.5
amd	epyc_7232p_firmware	< romepi_1.0.0.g	romepi_1.0.0.g
amd	epyc_7251_firmware	< naplespi_1.0.0.k	naplespi_1.0.0.k
amd	epyc_7252_firmware	< romepi_1.0.0.g	romepi_1.0.0.g
amd	epyc_7261_firmware	< naplespi_1.0.0.k	naplespi_1.0.0.k
amd	epyc_7262_firmware	< romepi_1.0.0.g	romepi_1.0.0.g
amd	epyc_7272_firmware	< romepi_1.0.0.g	romepi_1.0.0.g
amd	epyc_7281_firmware	< naplespi_1.0.0.k	naplespi_1.0.0.k
amd	epyc_7282_firmware	< romepi_1.0.0.g	romepi_1.0.0.g
amd	epyc_72f3_firmware	< milanpi_1.0.0.5	milanpi_1.0.0.5
amd	epyc_7301_firmware	< naplespi_1.0.0.k	naplespi_1.0.0.k
amd	epyc_7302_firmware	< romepi_1.0.0.g	romepi_1.0.0.g
amd	epyc_7302p_firmware	< romepi_1.0.0.g	romepi_1.0.0.g
amd	epyc_7303_firmware	< milanpi_1.0.0.5	milanpi_1.0.0.5
amd	epyc_7303p_firmware	< milanpi_1.0.0.5	milanpi_1.0.0.5
amd	epyc_7313_firmware	< milanpi_1.0.0.5	milanpi_1.0.0.5
amd	epyc_7313p_firmware	< milanpi_1.0.0.5	milanpi_1.0.0.5
amd	epyc_7343_firmware	< milanpi_1.0.0.5	milanpi_1.0.0.5
amd	epyc_7351_firmware	< naplespi_1.0.0.k	naplespi_1.0.0.k
amd	epyc_7351p_firmware	< naplespi_1.0.0.k	naplespi_1.0.0.k
amd	epyc_7352_firmware	< romepi_1.0.0.g	romepi_1.0.0.g
amd	epyc_7371_firmware	< naplespi_1.0.0.k	naplespi_1.0.0.k
amd	epyc_7373x_firmware	< milanpi_1.0.0.5	milanpi_1.0.0.5

CWE-367