Low severity3.3NVD Advisory· Published Nov 14, 2023· Updated Jun 17, 2026

CVE-2023-20521

Description

TOCTOU in the ASP Bootloader may allow an attacker with physical access to tamper with SPI ROM records after memory content verification, potentially leading to loss of confidentiality or a denial of service.

Affected products

132

AMD/ASP Bootloaderllm-fuzzy
osv-coords24 versions
pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-ESPOS pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSS pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSS pkg:rpm/suse/kernel-firmware&distro=SUSE%20Enterprise%20Storage%207.1 pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSS pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2 pkg:rpm/opensuse/kernel-firmware&distro=openSUSE%20Leap%2015.5 pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20Micro%205.3 pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20Micro%205.4 pkg:rpm/opensuse/kernel-firmware&distro=openSUSE%20Leap%20Micro%205.3 pkg:rpm/opensuse/kernel-firmware&distro=openSUSE%20Leap%2015.4 pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3 pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20Micro%205.2 pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5 pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5 pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20Micro%205.5 pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP5 pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-LTSS pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP4 pkg:rpm/opensuse/kernel-firmware&distro=openSUSE%20Leap%20Micro%205.4 pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20Micro%205.1 pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-LTSS pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSS pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP1
< 20210208-150300.4.19.1+ 23 more
- (no CPE)range: < 20210208-150300.4.19.1
- (no CPE)range: < 20210208-150300.4.19.1
- (no CPE)range: < 20210208-150300.4.19.1
- (no CPE)range: < 20210208-150300.4.19.1
- (no CPE)range: < 20200107-150100.3.40.1
- (no CPE)range: < 20200107-150100.3.40.1
- (no CPE)range: < 20230724-150500.3.9.1
- (no CPE)range: < 20220509-150400.4.25.1
- (no CPE)range: < 20220509-150400.4.25.1
- (no CPE)range: < 20220509-150400.4.25.1
- (no CPE)range: < 20220509-150400.4.25.1
- (no CPE)range: < 20210208-150300.4.19.1
- (no CPE)range: < 20210208-150300.4.19.1
- (no CPE)range: < 20190618-5.34.1
- (no CPE)range: < 20190618-5.34.1
- (no CPE)range: < 20230724-150500.3.9.1
- (no CPE)range: < 20230724-150500.3.9.1
- (no CPE)range: < 20200107-150100.3.40.1
- (no CPE)range: < 20220509-150400.4.25.1
- (no CPE)range: < 20220509-150400.4.25.1
- (no CPE)range: < 20210208-150300.4.19.1
- (no CPE)range: < 20200107-150100.3.40.1
- (no CPE)range: < 20200107-150100.3.40.1
- (no CPE)range: < 20200107-150100.3.40.1
AMD/EPYC Processorscpe-rescue3 versions
various+ 2 more
- (no CPE)range: various
- (no CPE)range: various
- (no CPE)range: various
AMD/Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics “Picasso” AM4v5
Range: various
AMD/Ryzen™ Threadripper™ 2000 Series Processors “Colfax”v5
Range: various
AMD/Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Dali”/”Dali” FP5v5
Range: various
AMD/Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Pollock”v5
Range: various
AMD/Ryzen™ 3000 Series Mobile Processor with Radeon™ Graphics “Picasso” FP5v5
Range: various
AMD/AMD EPYC™ Embedded 3000v5
Range: various
AMD/AMD EPYC™ Embedded 7002v5
Range: various
AMD/AMD EPYC™ Embedded 7003v5
Range: various
AMD/AMD Ryzen™ Embedded R1000v5
Range: various
AMD/AMD Ryzen™ Embedded R2000v5
Range: various
AMD/AMD Ryzen™ Embedded V1000v5
Range: various
AMD/Epyc 7001 Firmware
cpe:2.3:o:amd:epyc_7001_firmware:*:*:*:*:*:*:*:*
Range: <naplespi_1.0.0.h
AMD/Epyc 7251 Firmware
cpe:2.3:o:amd:epyc_7251_firmware:*:*:*:*:*:*:*:*
Range: <naplespi_1.0.0.h
AMD/Epyc 7261 Firmware
cpe:2.3:o:amd:epyc_7261_firmware:*:*:*:*:*:*:*:*
Range: <naplespi_1.0.0.h
AMD/Epyc 7281 Firmware
cpe:2.3:o:amd:epyc_7281_firmware:*:*:*:*:*:*:*:*
Range: <naplespi_1.0.0.h
AMD/Epyc 7301 Firmware
cpe:2.3:o:amd:epyc_7301_firmware:*:*:*:*:*:*:*:*
Range: <naplespi_1.0.0.h
AMD/Epyc 7351 Firmware
cpe:2.3:o:amd:epyc_7351_firmware:*:*:*:*:*:*:*:*
Range: <naplespi_1.0.0.h
AMD/Epyc 7351p Firmware
cpe:2.3:o:amd:epyc_7351p_firmware:*:*:*:*:*:*:*:*
Range: <naplespi_1.0.0.h
AMD/Epyc 7371 Firmware
cpe:2.3:o:amd:epyc_7371_firmware:*:*:*:*:*:*:*:*
Range: <naplespi_1.0.0.h
AMD/Epyc 7401 Firmware
cpe:2.3:o:amd:epyc_7401_firmware:*:*:*:*:*:*:*:*
Range: <naplespi_1.0.0.h
AMD/Epyc 7401p Firmware
cpe:2.3:o:amd:epyc_7401p_firmware:*:*:*:*:*:*:*:*
Range: <naplespi_1.0.0.h
AMD/Epyc 7451 Firmware
cpe:2.3:o:amd:epyc_7451_firmware:*:*:*:*:*:*:*:*
Range: <naplespi_1.0.0.h
AMD/Epyc 7501 Firmware
cpe:2.3:o:amd:epyc_7501_firmware:*:*:*:*:*:*:*:*
Range: <naplespi_1.0.0.h
AMD/Epyc 7551 Firmware
cpe:2.3:o:amd:epyc_7551_firmware:*:*:*:*:*:*:*:*
Range: <naplespi_1.0.0.h
AMD/Epyc 7551p Firmware
cpe:2.3:o:amd:epyc_7551p_firmware:*:*:*:*:*:*:*:*
Range: <naplespi_1.0.0.h
AMD/Epyc 7601 Firmware
cpe:2.3:o:amd:epyc_7601_firmware:*:*:*:*:*:*:*:*
Range: <naplespi_1.0.0.h
AMD/Epyc 7642 Firmware3 versions
cpe:2.3:o:amd:epyc_7232p_firmware:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:amd:epyc_7232p_firmware:*:*:*:*:*:*:*:*range: <romepi_1.0.0.d
- cpe:2.3:o:amd:epyc_7552_firmware:*:*:*:*:*:*:*:*range: <romepi_1.0.0.d
- cpe:2.3:o:amd:epyc_7642_firmware:*:*:*:*:*:*:*:*range: <romepi_1.0.0.d
AMD/Epyc 7252 Firmware
cpe:2.3:o:amd:epyc_7252_firmware:*:*:*:*:*:*:*:*
Range: <romepi_1.0.0.d
AMD/Epyc 7262 Firmware
cpe:2.3:o:amd:epyc_7262_firmware:*:*:*:*:*:*:*:*
Range: <romepi_1.0.0.d
AMD/Epyc 7742 Firmware4 versions
cpe:2.3:o:amd:epyc_7272_firmware:*:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:o:amd:epyc_7272_firmware:*:*:*:*:*:*:*:*range: <romepi_1.0.0.d
- cpe:2.3:o:amd:epyc_7402p_firmware:*:*:*:*:*:*:*:*range: <romepi_1.0.0.d
- cpe:2.3:o:amd:epyc_7702p_firmware:*:*:*:*:*:*:*:*range: <romepi_1.0.0.d
- cpe:2.3:o:amd:epyc_7742_firmware:*:*:*:*:*:*:*:*range: <romepi_1.0.0.d
AMD/Epyc 7542 Firmware2 versions
cpe:2.3:o:amd:epyc_7282_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:amd:epyc_7282_firmware:*:*:*:*:*:*:*:*range: <romepi_1.0.0.d
- cpe:2.3:o:amd:epyc_7542_firmware:*:*:*:*:*:*:*:*range: <romepi_1.0.0.d
AMD/Epyc 7302 Firmware2 versions
cpe:2.3:o:amd:epyc_7302_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:amd:epyc_7302_firmware:*:*:*:*:*:*:*:*range: <romepi_1.0.0.d
- cpe:2.3:o:amd:epyc_7502p_firmware:*:*:*:*:*:*:*:*range: <romepi_1.0.0.d
AMD/Epyc 7302p Firmware
cpe:2.3:o:amd:epyc_7302p_firmware:*:*:*:*:*:*:*:*
Range: <romepi_1.0.0.d
AMD/Epyc 7352 Firmware
cpe:2.3:o:amd:epyc_7352_firmware:*:*:*:*:*:*:*:*
Range: <romepi_1.0.0.d
AMD/Epyc 7402 Firmware
cpe:2.3:o:amd:epyc_7402_firmware:*:*:*:*:*:*:*:*
Range: <romepi_1.0.0.d
AMD/Epyc 7452 Firmware
cpe:2.3:o:amd:epyc_7452_firmware:*:*:*:*:*:*:*:*
Range: <romepi_1.0.0.d
AMD/Epyc 7502 Firmware
cpe:2.3:o:amd:epyc_7502_firmware:*:*:*:*:*:*:*:*
Range: <romepi_1.0.0.d
AMD/Epyc 7f32 Firmware3 versions
cpe:2.3:o:amd:epyc_7532_firmware:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:amd:epyc_7532_firmware:*:*:*:*:*:*:*:*range: <romepi_1.0.0.d
- cpe:2.3:o:amd:epyc_7f32_firmware:*:*:*:*:*:*:*:*range: <romepi_1.0.0.d
- cpe:2.3:o:amd:epyc_7h12_firmware:*:*:*:*:*:*:*:*range: <romepi_1.0.0.d
AMD/Epyc 7662 Firmware
cpe:2.3:o:amd:epyc_7662_firmware:*:*:*:*:*:*:*:*
Range: <romepi_1.0.0.d
AMD/Epyc 7702 Firmware
cpe:2.3:o:amd:epyc_7702_firmware:*:*:*:*:*:*:*:*
Range: <romepi_1.0.0.d
AMD/Epyc 7f52 Firmware
cpe:2.3:o:amd:epyc_7f52_firmware:*:*:*:*:*:*:*:*
Range: <romepi_1.0.0.d
AMD/Epyc 7f72 Firmware
cpe:2.3:o:amd:epyc_7f72_firmware:*:*:*:*:*:*:*:*
Range: <romepi_1.0.0.d
AMD/Epyc 7763 Firmware
cpe:2.3:o:amd:epyc_7763_firmware:*:*:*:*:*:*:*:*
Range: <milanpi_1.0.0.7
AMD/Epyc 7713p Firmware
cpe:2.3:o:amd:epyc_7713p_firmware:*:*:*:*:*:*:*:*
Range: <milanpi_1.0.0.7
AMD/Epyc 7713 Firmware
cpe:2.3:o:amd:epyc_7713_firmware:*:*:*:*:*:*:*:*
Range: <milanpi_1.0.0.7
AMD/Epyc 7663p Firmware
cpe:2.3:o:amd:epyc_7663p_firmware:*:*:*:*:*:*:*:*
Range: <milanpi_1.0.0.7
AMD/Epyc 7663 Firmware
cpe:2.3:o:amd:epyc_7663_firmware:*:*:*:*:*:*:*:*
Range: <milanpi_1.0.0.7
AMD/Epyc 7643p Firmware
cpe:2.3:o:amd:epyc_7643p_firmware:*:*:*:*:*:*:*:*
Range: <milanpi_1.0.0.7
AMD/Epyc 7773x Firmware
cpe:2.3:o:amd:epyc_7773x_firmware:*:*:*:*:*:*:*:*
Range: <milanpi_1.0.0.7
AMD/Epyc 7643 Firmware
cpe:2.3:o:amd:epyc_7643_firmware:*:*:*:*:*:*:*:*
Range: <milanpi_1.0.0.7
AMD/Epyc 7573x Firmware
cpe:2.3:o:amd:epyc_7573x_firmware:*:*:*:*:*:*:*:*
Range: <milanpi_1.0.0.7
AMD/Epyc 75f3 Firmware
cpe:2.3:o:amd:epyc_75f3_firmware:*:*:*:*:*:*:*:*
Range: <milanpi_1.0.0.7
AMD/Epyc 7543p Firmware
cpe:2.3:o:amd:epyc_7543p_firmware:*:*:*:*:*:*:*:*
Range: <milanpi_1.0.0.7
AMD/Epyc 7543 Firmware
cpe:2.3:o:amd:epyc_7543_firmware:*:*:*:*:*:*:*:*
Range: <milanpi_1.0.0.7
AMD/Epyc 7513 Firmware
cpe:2.3:o:amd:epyc_7513_firmware:*:*:*:*:*:*:*:*
Range: <milanpi_1.0.0.7
AMD/Epyc 7473x Firmware
cpe:2.3:o:amd:epyc_7473x_firmware:*:*:*:*:*:*:*:*
Range: <milanpi_1.0.0.7
AMD/Epyc 7453 Firmware
cpe:2.3:o:amd:epyc_7453_firmware:*:*:*:*:*:*:*:*
Range: <milanpi_1.0.0.7
AMD/Epyc 74f3 Firmware
cpe:2.3:o:amd:epyc_74f3_firmware:*:*:*:*:*:*:*:*
Range: <milanpi_1.0.0.7
AMD/Epyc 7443p Firmware
cpe:2.3:o:amd:epyc_7443p_firmware:*:*:*:*:*:*:*:*
Range: <milanpi_1.0.0.7
AMD/Epyc 7443 Firmware
cpe:2.3:o:amd:epyc_7443_firmware:*:*:*:*:*:*:*:*
Range: <milanpi_1.0.0.7
AMD/Epyc 7413 Firmware
cpe:2.3:o:amd:epyc_7413_firmware:*:*:*:*:*:*:*:*
Range: <milanpi_1.0.0.7
AMD/Epyc 7373x Firmware
cpe:2.3:o:amd:epyc_7373x_firmware:*:*:*:*:*:*:*:*
Range: <milanpi_1.0.0.7
AMD/Epyc 73f3 Firmware
cpe:2.3:o:amd:epyc_73f3_firmware:*:*:*:*:*:*:*:*
Range: <milanpi_1.0.0.7
AMD/Epyc 7343 Firmware
cpe:2.3:o:amd:epyc_7343_firmware:*:*:*:*:*:*:*:*
Range: <milanpi_1.0.0.7
AMD/Epyc 7313p Firmware
cpe:2.3:o:amd:epyc_7313p_firmware:*:*:*:*:*:*:*:*
Range: <milanpi_1.0.0.7
AMD/Epyc 7313 Firmware
cpe:2.3:o:amd:epyc_7313_firmware:*:*:*:*:*:*:*:*
Range: <milanpi_1.0.0.7
AMD/Epyc 7303p Firmware
cpe:2.3:o:amd:epyc_7303p_firmware:*:*:*:*:*:*:*:*
Range: <milanpi_1.0.0.7
AMD/Epyc 7303 Firmware
cpe:2.3:o:amd:epyc_7303_firmware:*:*:*:*:*:*:*:*
Range: <milanpi_1.0.0.7
AMD/Epyc 72f3 Firmware
cpe:2.3:o:amd:epyc_72f3_firmware:*:*:*:*:*:*:*:*
Range: <milanpi_1.0.0.7
AMD/Epyc 7203p Firmware
cpe:2.3:o:amd:epyc_7203p_firmware:*:*:*:*:*:*:*:*
Range: <milanpi_1.0.0.7
AMD/Epyc 7203 Firmware
cpe:2.3:o:amd:epyc_7203_firmware:*:*:*:*:*:*:*:*
Range: <milanpi_1.0.0.7
AMD/Athlon Pro 300ge Firmware
cpe:2.3:o:amd:athlon_pro_300ge_firmware:-:*:*:*:*:*:*:*
AMD/Athlon Gold Pro 3150ge Firmware
cpe:2.3:o:amd:athlon_gold_pro_3150ge_firmware:-:*:*:*:*:*:*:*
AMD/Athlon Gold 3150g Firmware
cpe:2.3:o:amd:athlon_gold_3150g_firmware:-:*:*:*:*:*:*:*
AMD/Athlon Gold Pro 3150g Firmware
cpe:2.3:o:amd:athlon_gold_pro_3150g_firmware:-:*:*:*:*:*:*:*
AMD/Ryzen Threadripper 2990wx Firmware
cpe:2.3:o:amd:ryzen_threadripper_2990wx_firmware:*:*:*:*:*:*:*:*
Range: <summitpi-sp3r2_1.1.0.6
AMD/Ryzen Threadripper 2970wx Firmware
cpe:2.3:o:amd:ryzen_threadripper_2970wx_firmware:*:*:*:*:*:*:*:*
Range: <summitpi-sp3r2_1.1.0.6
AMD/Ryzen Threadripper 2950x Firmware
cpe:2.3:o:amd:ryzen_threadripper_2950x_firmware:*:*:*:*:*:*:*:*
Range: <summitpi-sp3r2_1.1.0.6
AMD/Ryzen Threadripper 2920x Firmware
cpe:2.3:o:amd:ryzen_threadripper_2920x_firmware:*:*:*:*:*:*:*:*
Range: <summitpi-sp3r2_1.1.0.6
AMD/Ryzen 7 3780u Firmware
cpe:2.3:o:amd:ryzen_7_3780u_firmware:*:*:*:*:*:*:*:*
Range: <picassopi-fp5_1.0.0.e
AMD/Ryzen 7 3750h Firmware
cpe:2.3:o:amd:ryzen_7_3750h_firmware:*:*:*:*:*:*:*:*
Range: <picassopi-fp5_1.0.0.e
AMD/Ryzen 7 3700c Firmware
cpe:2.3:o:amd:ryzen_7_3700c_firmware:*:*:*:*:*:*:*:*
Range: <picassopi-fp5_1.0.0.e
AMD/Ryzen 3 5425u Firmware
cpe:2.3:o:amd:ryzen_7_3700u_firmware:*:*:*:*:*:*:*:*
Range: <picassopi-fp5_1.0.0.e
AMD/Ryzen 5 5625u Firmware
cpe:2.3:o:amd:ryzen_5_3580u_firmware:*:*:*:*:*:*:*:*
Range: <picassopi-fp5_1.0.0.e
AMD/Ryzen 5 3550h Firmware
cpe:2.3:o:amd:ryzen_5_3550h_firmware:*:*:*:*:*:*:*:*
Range: <picassopi-fp5_1.0.0.e
AMD/Ryzen 5 3500c Firmware
cpe:2.3:o:amd:ryzen_5_3500c_firmware:*:*:*:*:*:*:*:*
Range: <picassopi-fp5_1.0.0.e
AMD/Ryzen 5 3500u Firmware
cpe:2.3:o:amd:ryzen_5_3500u_firmware:*:*:*:*:*:*:*:*
Range: <picassopi-fp5_1.0.0.e
AMD/Ryzen 5 3450u Firmware
cpe:2.3:o:amd:ryzen_5_3450u_firmware:*:*:*:*:*:*:*:*
Range: <picassopi-fp5_1.0.0.e
AMD/Ryzen 3 3350u Firmware
cpe:2.3:o:amd:ryzen_3_3350u_firmware:*:*:*:*:*:*:*:*
Range: <picassopi-fp5_1.0.0.e
AMD/Ryzen 3 3200u Firmware2 versions
cpe:2.3:o:amd:ryzen_3_3300u_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:amd:ryzen_3_3300u_firmware:*:*:*:*:*:*:*:*range: <picassopi-fp5_1.0.0.e
- cpe:2.3:o:amd:ryzen_3_3200u_firmware:*:*:*:*:*:*:*:*range: <picassopi-fp5_1.0.0.e
AMD/Ryzen 3 3250u Firmware
cpe:2.3:o:amd:ryzen_3_3250u_firmware:*:*:*:*:*:*:*:*
Range: <picassopi-fp5_1.0.0.e
AMD/Ryzen 3 3250c Firmware
cpe:2.3:o:amd:ryzen_3_3250c_firmware:*:*:*:*:*:*:*:*
Range: <picassopi-fp5_1.0.0.e
AMD/Amd 3015e Firmware
cpe:2.3:o:amd:amd_3015e_firmware:*:*:*:*:*:*:*:*
Range: <pollockpi-ft5_1.0.0.4
AMD/Amd 3015ce Firmware
cpe:2.3:o:amd:amd_3015ce_firmware:*:*:*:*:*:*:*:*
Range: <pollockpi-ft5_1.0.0.4

Patches

Vulnerability mechanics

References

www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3002nvdVendor Advisory
www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4002nvdVendor Advisory
www.amd.com/en/corporate/product-security/bulletin/AMD-SB-5001nvd

News mentions

No linked articles in our index yet.

cvss	0.214
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000