Critical severity9.8NVD Advisory· Published May 9, 2023· Updated Jun 17, 2026

CVE-2023-20520

Description

Improper access control settings in ASP Bootloader may allow an attacker to corrupt the return address causing a stack-based buffer overrun potentially leading to arbitrary code execution.

Affected products

AMD/Epyc 7642 Firmware3 versions
cpe:2.3:o:amd:epyc_7232p_firmware:romepi_1.0.0.d:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:amd:epyc_7232p_firmware:romepi_1.0.0.d:*:*:*:*:*:*:*
- cpe:2.3:o:amd:epyc_7552_firmware:romepi_1.0.0.d:*:*:*:*:*:*:*
- cpe:2.3:o:amd:epyc_7642_firmware:romepi_1.0.0.d:*:*:*:*:*:*:*
AMD/Epyc 7251 Firmware
cpe:2.3:o:amd:epyc_7251_firmware:naplespi_1.0.0.h:*:*:*:*:*:*:*
AMD/Epyc 7252 Firmware
cpe:2.3:o:amd:epyc_7252_firmware:romepi_1.0.0.d:*:*:*:*:*:*:*
AMD/Epyc 7261 Firmware
cpe:2.3:o:amd:epyc_7261_firmware:naplespi_1.0.0.h:*:*:*:*:*:*:*
AMD/Epyc 7262 Firmware
cpe:2.3:o:amd:epyc_7262_firmware:romepi_1.0.0.d:*:*:*:*:*:*:*
AMD/Epyc 7742 Firmware4 versions
cpe:2.3:o:amd:epyc_7272_firmware:romepi_1.0.0.d:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:o:amd:epyc_7272_firmware:romepi_1.0.0.d:*:*:*:*:*:*:*
- cpe:2.3:o:amd:epyc_7402p_firmware:romepi_1.0.0.d:*:*:*:*:*:*:*
- cpe:2.3:o:amd:epyc_7702p_firmware:romepi_1.0.0.d:*:*:*:*:*:*:*
- cpe:2.3:o:amd:epyc_7742_firmware:romepi_1.0.0.d:*:*:*:*:*:*:*
AMD/Epyc 7281 Firmware
cpe:2.3:o:amd:epyc_7281_firmware:naplespi_1.0.0.h:*:*:*:*:*:*:*
AMD/Epyc 7542 Firmware2 versions
cpe:2.3:o:amd:epyc_7282_firmware:romepi_1.0.0.d:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:amd:epyc_7282_firmware:romepi_1.0.0.d:*:*:*:*:*:*:*
- cpe:2.3:o:amd:epyc_7542_firmware:romepi_1.0.0.d:*:*:*:*:*:*:*
AMD/Epyc 72f3 Firmware
cpe:2.3:o:amd:epyc_72f3_firmware:milanpi_1.0.0.5:*:*:*:*:*:*:*
AMD/Epyc 7301 Firmware
cpe:2.3:o:amd:epyc_7301_firmware:naplespi_1.0.0.h:*:*:*:*:*:*:*
AMD/Epyc 7302 Firmware2 versions
cpe:2.3:o:amd:epyc_7302_firmware:romepi_1.0.0.d:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:amd:epyc_7302_firmware:romepi_1.0.0.d:*:*:*:*:*:*:*
- cpe:2.3:o:amd:epyc_7502p_firmware:romepi_1.0.0.d:*:*:*:*:*:*:*
AMD/Epyc 7302p Firmware
cpe:2.3:o:amd:epyc_7302p_firmware:romepi_1.0.0.d:*:*:*:*:*:*:*
AMD/Epyc 7313 Firmware
cpe:2.3:o:amd:epyc_7313_firmware:milanpi_1.0.0.5:*:*:*:*:*:*:*
AMD/Epyc 7313p Firmware
cpe:2.3:o:amd:epyc_7313p_firmware:milanpi_1.0.0.5:*:*:*:*:*:*:*
AMD/Epyc 7343 Firmware
cpe:2.3:o:amd:epyc_7343_firmware:milanpi_1.0.0.5:*:*:*:*:*:*:*
AMD/Epyc 7351 Firmware
cpe:2.3:o:amd:epyc_7351_firmware:naplespi_1.0.0.h:*:*:*:*:*:*:*
AMD/Epyc 7351p Firmware
cpe:2.3:o:amd:epyc_7351p_firmware:naplespi_1.0.0.h:*:*:*:*:*:*:*
AMD/Epyc 7352 Firmware
cpe:2.3:o:amd:epyc_7352_firmware:romepi_1.0.0.d:*:*:*:*:*:*:*
AMD/Epyc 7371 Firmware
cpe:2.3:o:amd:epyc_7371_firmware:naplespi_1.0.0.h:*:*:*:*:*:*:*
AMD/Epyc 7373x Firmware
cpe:2.3:o:amd:epyc_7373x_firmware:milanpi_1.0.0.5:*:*:*:*:*:*:*
AMD/Epyc 73f3 Firmware
cpe:2.3:o:amd:epyc_73f3_firmware:milanpi_1.0.0.5:*:*:*:*:*:*:*
AMD/Epyc 7401 Firmware
cpe:2.3:o:amd:epyc_7401_firmware:naplespi_1.0.0.h:*:*:*:*:*:*:*
AMD/Epyc 7401p Firmware
cpe:2.3:o:amd:epyc_7401p_firmware:naplespi_1.0.0.h:*:*:*:*:*:*:*
AMD/Epyc 7402 Firmware
cpe:2.3:o:amd:epyc_7402_firmware:romepi_1.0.0.d:*:*:*:*:*:*:*
AMD/Epyc 7413 Firmware
cpe:2.3:o:amd:epyc_7413_firmware:milanpi_1.0.0.5:*:*:*:*:*:*:*
AMD/Epyc 7443 Firmware
cpe:2.3:o:amd:epyc_7443_firmware:milanpi_1.0.0.5:*:*:*:*:*:*:*
AMD/Epyc 7443p Firmware
cpe:2.3:o:amd:epyc_7443p_firmware:milanpi_1.0.0.5:*:*:*:*:*:*:*
AMD/Epyc 7451 Firmware
cpe:2.3:o:amd:epyc_7451_firmware:naplespi_1.0.0.h:*:*:*:*:*:*:*
AMD/Epyc 7452 Firmware
cpe:2.3:o:amd:epyc_7452_firmware:romepi_1.0.0.d:*:*:*:*:*:*:*
AMD/Epyc 7453 Firmware
cpe:2.3:o:amd:epyc_7453_firmware:milanpi_1.0.0.5:*:*:*:*:*:*:*
AMD/Epyc 7473x Firmware
cpe:2.3:o:amd:epyc_7473x_firmware:milanpi_1.0.0.5:*:*:*:*:*:*:*
AMD/Epyc 74f3 Firmware
cpe:2.3:o:amd:epyc_74f3_firmware:milanpi_1.0.0.5:*:*:*:*:*:*:*
AMD/Epyc 7501 Firmware
cpe:2.3:o:amd:epyc_7501_firmware:naplespi_1.0.0.h:*:*:*:*:*:*:*
AMD/Epyc 7502 Firmware
cpe:2.3:o:amd:epyc_7502_firmware:romepi_1.0.0.d:*:*:*:*:*:*:*
AMD/Epyc 7513 Firmware
cpe:2.3:o:amd:epyc_7513_firmware:milanpi_1.0.0.5:*:*:*:*:*:*:*
AMD/Epyc 7f32 Firmware3 versions
cpe:2.3:o:amd:epyc_7532_firmware:romepi_1.0.0.d:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:amd:epyc_7532_firmware:romepi_1.0.0.d:*:*:*:*:*:*:*
- cpe:2.3:o:amd:epyc_7f32_firmware:romepi_1.0.0.d:*:*:*:*:*:*:*
- cpe:2.3:o:amd:epyc_7h12_firmware:romepi_1.0.0.d:*:*:*:*:*:*:*
AMD/Epyc 7543 Firmware
cpe:2.3:o:amd:epyc_7543_firmware:milanpi_1.0.0.5:*:*:*:*:*:*:*
AMD/Epyc 7543p Firmware
cpe:2.3:o:amd:epyc_7543p_firmware:milanpi_1.0.0.5:*:*:*:*:*:*:*
AMD/Epyc 7551 Firmware
cpe:2.3:o:amd:epyc_7551_firmware:naplespi_1.0.0.h:*:*:*:*:*:*:*
AMD/Epyc 7551p Firmware
cpe:2.3:o:amd:epyc_7551p_firmware:naplespi_1.0.0.h:*:*:*:*:*:*:*
AMD/Epyc 7571 Firmware
cpe:2.3:o:amd:epyc_7571_firmware:naplespi_1.0.0.h:*:*:*:*:*:*:*
AMD/Epyc 7573x Firmware
cpe:2.3:o:amd:epyc_7573x_firmware:milanpi_1.0.0.5:*:*:*:*:*:*:*
AMD/Epyc 75f3 Firmware
cpe:2.3:o:amd:epyc_75f3_firmware:milanpi_1.0.0.5:*:*:*:*:*:*:*
AMD/Epyc 7601 Firmware
cpe:2.3:o:amd:epyc_7601_firmware:naplespi_1.0.0.h:*:*:*:*:*:*:*
AMD/Epyc 7643 Firmware
cpe:2.3:o:amd:epyc_7643_firmware:milanpi_1.0.0.5:*:*:*:*:*:*:*
AMD/Epyc 7662 Firmware
cpe:2.3:o:amd:epyc_7662_firmware:romepi_1.0.0.d:*:*:*:*:*:*:*
AMD/Epyc 7663 Firmware
cpe:2.3:o:amd:epyc_7663_firmware:milanpi_1.0.0.5:*:*:*:*:*:*:*
AMD/Epyc 7702 Firmware
cpe:2.3:o:amd:epyc_7702_firmware:romepi_1.0.0.d:*:*:*:*:*:*:*
AMD/Epyc 7713 Firmware
cpe:2.3:o:amd:epyc_7713_firmware:milanpi_1.0.0.5:*:*:*:*:*:*:*
AMD/Epyc 7713p Firmware
cpe:2.3:o:amd:epyc_7713p_firmware:milanpi_1.0.0.5:*:*:*:*:*:*:*
AMD/Epyc 7763 Firmware
cpe:2.3:o:amd:epyc_7763_firmware:milanpi_1.0.0.5:*:*:*:*:*:*:*
AMD/Epyc 7773x Firmware
cpe:2.3:o:amd:epyc_7773x_firmware:milanpi_1.0.0.5:*:*:*:*:*:*:*
AMD/Epyc 7f52 Firmware
cpe:2.3:o:amd:epyc_7f52_firmware:romepi_1.0.0.d:*:*:*:*:*:*:*
AMD/Epyc 7f72 Firmware
cpe:2.3:o:amd:epyc_7f72_firmware:romepi_1.0.0.d:*:*:*:*:*:*:*
AMD/ASP Bootloaderllm-fuzzy
AMD/1st Gen AMD EPYC™v5
Range: various
AMD/2nd Gen AMD EPYC™v5
Range: various
AMD/3rd Gen AMD EPYC™v5
Range: various

Patches

Vulnerability mechanics

References

www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3001nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000