Low severity1.9NVD Advisory· Published Nov 14, 2023· Updated Jun 17, 2026

CVE-2023-20526

Description

Insufficient input validation in the ASP Bootloader may enable a privileged attacker with physical access to expose the contents of ASP memory potentially leading to a loss of confidentiality.

Affected products

107

AMD/Epyc 7001 Firmware
cpe:2.3:o:amd:epyc_7001_firmware:*:*:*:*:*:*:*:*
Range: <naplespi_1.0.0.h
AMD/Epyc 7203 Firmware
cpe:2.3:o:amd:epyc_7203_firmware:*:*:*:*:*:*:*:*
Range: <milanpi_1.0.0.5
AMD/Epyc 7203p Firmware
cpe:2.3:o:amd:epyc_7203p_firmware:*:*:*:*:*:*:*:*
Range: <milanpi_1.0.0.5
AMD/Epyc 7642 Firmware3 versions
cpe:2.3:o:amd:epyc_7232p_firmware:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:amd:epyc_7232p_firmware:*:*:*:*:*:*:*:*range: <romepi_1.0.0.d
- cpe:2.3:o:amd:epyc_7552_firmware:*:*:*:*:*:*:*:*range: <romepi_1.0.0.d
- cpe:2.3:o:amd:epyc_7642_firmware:*:*:*:*:*:*:*:*range: <romepi_1.0.0.d
AMD/Epyc 7251 Firmware
cpe:2.3:o:amd:epyc_7251_firmware:*:*:*:*:*:*:*:*
Range: <naplespi_1.0.0.h
AMD/Epyc 7252 Firmware
cpe:2.3:o:amd:epyc_7252_firmware:*:*:*:*:*:*:*:*
Range: <romepi_1.0.0.d
AMD/Epyc 7261 Firmware
cpe:2.3:o:amd:epyc_7261_firmware:*:*:*:*:*:*:*:*
Range: <naplespi_1.0.0.h
AMD/Epyc 7262 Firmware
cpe:2.3:o:amd:epyc_7262_firmware:*:*:*:*:*:*:*:*
Range: <romepi_1.0.0.d
AMD/Epyc 7742 Firmware4 versions
cpe:2.3:o:amd:epyc_7272_firmware:*:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:o:amd:epyc_7272_firmware:*:*:*:*:*:*:*:*range: <romepi_1.0.0.d
- cpe:2.3:o:amd:epyc_7402p_firmware:*:*:*:*:*:*:*:*range: <romepi_1.0.0.d
- cpe:2.3:o:amd:epyc_7702p_firmware:*:*:*:*:*:*:*:*range: <romepi_1.0.0.d
- cpe:2.3:o:amd:epyc_7742_firmware:*:*:*:*:*:*:*:*range: <romepi_1.0.0.d
AMD/Epyc 7281 Firmware
cpe:2.3:o:amd:epyc_7281_firmware:*:*:*:*:*:*:*:*
Range: <naplespi_1.0.0.h
AMD/Epyc 7542 Firmware2 versions
cpe:2.3:o:amd:epyc_7282_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:amd:epyc_7282_firmware:*:*:*:*:*:*:*:*range: <romepi_1.0.0.d
- cpe:2.3:o:amd:epyc_7542_firmware:*:*:*:*:*:*:*:*range: <romepi_1.0.0.d
AMD/Epyc 72f3 Firmware
cpe:2.3:o:amd:epyc_72f3_firmware:*:*:*:*:*:*:*:*
Range: <milanpi_1.0.0.5
AMD/Epyc 7301 Firmware
cpe:2.3:o:amd:epyc_7301_firmware:*:*:*:*:*:*:*:*
Range: <naplespi_1.0.0.h
AMD/Epyc 7302 Firmware2 versions
cpe:2.3:o:amd:epyc_7302_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:amd:epyc_7302_firmware:*:*:*:*:*:*:*:*range: <romepi_1.0.0.d
- cpe:2.3:o:amd:epyc_7502p_firmware:*:*:*:*:*:*:*:*range: <romepi_1.0.0.d
AMD/Epyc 7302p Firmware
cpe:2.3:o:amd:epyc_7302p_firmware:*:*:*:*:*:*:*:*
Range: <romepi_1.0.0.d
AMD/Epyc 7303 Firmware
cpe:2.3:o:amd:epyc_7303_firmware:*:*:*:*:*:*:*:*
Range: <milanpi_1.0.0.5
AMD/Epyc 7303p Firmware
cpe:2.3:o:amd:epyc_7303p_firmware:*:*:*:*:*:*:*:*
Range: <milanpi_1.0.0.5
AMD/Epyc 7313 Firmware
cpe:2.3:o:amd:epyc_7313_firmware:*:*:*:*:*:*:*:*
Range: <milanpi_1.0.0.5
AMD/Epyc 7313p Firmware
cpe:2.3:o:amd:epyc_7313p_firmware:*:*:*:*:*:*:*:*
Range: <milanpi_1.0.0.5
AMD/Epyc 7343 Firmware
cpe:2.3:o:amd:epyc_7343_firmware:*:*:*:*:*:*:*:*
Range: <milanpi_1.0.0.5
AMD/Epyc 7351 Firmware
cpe:2.3:o:amd:epyc_7351_firmware:*:*:*:*:*:*:*:*
Range: <naplespi_1.0.0.h
AMD/Epyc 7351p Firmware
cpe:2.3:o:amd:epyc_7351p_firmware:*:*:*:*:*:*:*:*
Range: <naplespi_1.0.0.h
AMD/Epyc 7352 Firmware
cpe:2.3:o:amd:epyc_7352_firmware:*:*:*:*:*:*:*:*
Range: <romepi_1.0.0.d
AMD/Epyc 7371 Firmware
cpe:2.3:o:amd:epyc_7371_firmware:*:*:*:*:*:*:*:*
Range: <naplespi_1.0.0.h
AMD/Epyc 7373x Firmware
cpe:2.3:o:amd:epyc_7373x_firmware:*:*:*:*:*:*:*:*
Range: <milanpi_1.0.0.5
AMD/Epyc 73f3 Firmware
cpe:2.3:o:amd:epyc_73f3_firmware:*:*:*:*:*:*:*:*
Range: <milanpi_1.0.0.5
AMD/Epyc 7401 Firmware
cpe:2.3:o:amd:epyc_7401_firmware:*:*:*:*:*:*:*:*
Range: <naplespi_1.0.0.h
AMD/Epyc 7401p Firmware
cpe:2.3:o:amd:epyc_7401p_firmware:*:*:*:*:*:*:*:*
Range: <naplespi_1.0.0.h
AMD/Epyc 7402 Firmware
cpe:2.3:o:amd:epyc_7402_firmware:*:*:*:*:*:*:*:*
Range: <romepi_1.0.0.d
AMD/Epyc 7413 Firmware
cpe:2.3:o:amd:epyc_7413_firmware:*:*:*:*:*:*:*:*
Range: <milanpi_1.0.0.5
AMD/Epyc 7443 Firmware
cpe:2.3:o:amd:epyc_7443_firmware:*:*:*:*:*:*:*:*
Range: <milanpi_1.0.0.5
AMD/Epyc 7443p Firmware
cpe:2.3:o:amd:epyc_7443p_firmware:*:*:*:*:*:*:*:*
Range: <milanpi_1.0.0.5
AMD/Epyc 7451 Firmware
cpe:2.3:o:amd:epyc_7451_firmware:*:*:*:*:*:*:*:*
Range: <naplespi_1.0.0.h
AMD/Epyc 7452 Firmware
cpe:2.3:o:amd:epyc_7452_firmware:*:*:*:*:*:*:*:*
Range: <romepi_1.0.0.d
AMD/Epyc 7453 Firmware
cpe:2.3:o:amd:epyc_7453_firmware:*:*:*:*:*:*:*:*
Range: <milanpi_1.0.0.5
AMD/Epyc 7473x Firmware
cpe:2.3:o:amd:epyc_7473x_firmware:*:*:*:*:*:*:*:*
Range: <milanpi_1.0.0.5
AMD/Epyc 74f3 Firmware
cpe:2.3:o:amd:epyc_74f3_firmware:*:*:*:*:*:*:*:*
Range: <milanpi_1.0.0.5
AMD/Epyc 7501 Firmware
cpe:2.3:o:amd:epyc_7501_firmware:*:*:*:*:*:*:*:*
Range: <naplespi_1.0.0.h
AMD/Epyc 7502 Firmware
cpe:2.3:o:amd:epyc_7502_firmware:*:*:*:*:*:*:*:*
Range: <romepi_1.0.0.d
AMD/Epyc 7513 Firmware
cpe:2.3:o:amd:epyc_7513_firmware:*:*:*:*:*:*:*:*
Range: <milanpi_1.0.0.5
AMD/Epyc 7f32 Firmware3 versions
cpe:2.3:o:amd:epyc_7532_firmware:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:amd:epyc_7532_firmware:*:*:*:*:*:*:*:*range: <romepi_1.0.0.d
- cpe:2.3:o:amd:epyc_7f32_firmware:*:*:*:*:*:*:*:*range: <romepi_1.0.0.d
- cpe:2.3:o:amd:epyc_7h12_firmware:*:*:*:*:*:*:*:*range: <romepi_1.0.0.d
AMD/Epyc 7543 Firmware
cpe:2.3:o:amd:epyc_7543_firmware:*:*:*:*:*:*:*:*
Range: <milanpi_1.0.0.5
AMD/Epyc 7543p Firmware
cpe:2.3:o:amd:epyc_7543p_firmware:*:*:*:*:*:*:*:*
Range: <milanpi_1.0.0.5
AMD/Epyc 7551 Firmware
cpe:2.3:o:amd:epyc_7551_firmware:*:*:*:*:*:*:*:*
Range: <naplespi_1.0.0.h
AMD/Epyc 7551p Firmware
cpe:2.3:o:amd:epyc_7551p_firmware:*:*:*:*:*:*:*:*
Range: <naplespi_1.0.0.h
AMD/Epyc 7573x Firmware
cpe:2.3:o:amd:epyc_7573x_firmware:*:*:*:*:*:*:*:*
Range: <milanpi_1.0.0.5
AMD/Epyc 75f3 Firmware
cpe:2.3:o:amd:epyc_75f3_firmware:*:*:*:*:*:*:*:*
Range: <milanpi_1.0.0.5
AMD/Epyc 7601 Firmware
cpe:2.3:o:amd:epyc_7601_firmware:*:*:*:*:*:*:*:*
Range: <naplespi_1.0.0.h
AMD/Epyc 7643 Firmware
cpe:2.3:o:amd:epyc_7643_firmware:*:*:*:*:*:*:*:*
Range: <milanpi_1.0.0.5
AMD/Epyc 7643p Firmware
cpe:2.3:o:amd:epyc_7643p_firmware:*:*:*:*:*:*:*:*
Range: <milanpi_1.0.0.5
AMD/Epyc 7662 Firmware
cpe:2.3:o:amd:epyc_7662_firmware:*:*:*:*:*:*:*:*
Range: <romepi_1.0.0.d
AMD/Epyc 7663 Firmware
cpe:2.3:o:amd:epyc_7663_firmware:*:*:*:*:*:*:*:*
Range: <milanpi_1.0.0.5
AMD/Epyc 7663p Firmware
cpe:2.3:o:amd:epyc_7663p_firmware:*:*:*:*:*:*:*:*
Range: <milanpi_1.0.0.5
AMD/Epyc 7702 Firmware
cpe:2.3:o:amd:epyc_7702_firmware:*:*:*:*:*:*:*:*
Range: <romepi_1.0.0.d
AMD/Epyc 7713 Firmware
cpe:2.3:o:amd:epyc_7713_firmware:*:*:*:*:*:*:*:*
Range: <milanpi_1.0.0.5
AMD/Epyc 7713p Firmware
cpe:2.3:o:amd:epyc_7713p_firmware:*:*:*:*:*:*:*:*
Range: <milanpi_1.0.0.5
AMD/Epyc 7763 Firmware
cpe:2.3:o:amd:epyc_7763_firmware:*:*:*:*:*:*:*:*
Range: <milanpi_1.0.0.5
AMD/Epyc 7773x Firmware
cpe:2.3:o:amd:epyc_7773x_firmware:*:*:*:*:*:*:*:*
Range: <milanpi_1.0.0.5
AMD/Epyc 7f52 Firmware
cpe:2.3:o:amd:epyc_7f52_firmware:*:*:*:*:*:*:*:*
Range: <romepi_1.0.0.d
AMD/Epyc 7f72 Firmware
cpe:2.3:o:amd:epyc_7f72_firmware:*:*:*:*:*:*:*:*
Range: <romepi_1.0.0.d
AMD/Ryzen Threadripper 2920x Firmware
cpe:2.3:o:amd:ryzen_threadripper_2920x_firmware:*:*:*:*:*:*:*:*
Range: <summitpi-sp3r2_1.1.0.7
AMD/Ryzen Threadripper 2950x Firmware
cpe:2.3:o:amd:ryzen_threadripper_2950x_firmware:*:*:*:*:*:*:*:*
Range: <summitpi-sp3r2_1.1.0.7
AMD/Ryzen Threadripper 2970wx Firmware
cpe:2.3:o:amd:ryzen_threadripper_2970wx_firmware:*:*:*:*:*:*:*:*
Range: <summitpi-sp3r2_1.1.0.7
AMD/Ryzen Threadripper 2990wx Firmware
cpe:2.3:o:amd:ryzen_threadripper_2990wx_firmware:*:*:*:*:*:*:*:*
Range: <summitpi-sp3r2_1.1.0.7
AMD/ASP Bootloaderllm-fuzzy
osv-coords26 versions
pkg:rpm/opensuse/kernel-firmware&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/kernel-firmware&distro=openSUSE%20Leap%2015.5 pkg:rpm/opensuse/kernel-firmware&distro=openSUSE%20Leap%20Micro%205.3 pkg:rpm/opensuse/kernel-firmware&distro=openSUSE%20Leap%20Micro%205.4 pkg:rpm/opensuse/kernel-firmware&distro=openSUSE%20Tumbleweed pkg:rpm/opensuse/kernel-firmware-ath12k&distro=openSUSE%20Tumbleweed pkg:rpm/suse/kernel-firmware&distro=SUSE%20Enterprise%20Storage%207.1 pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-LTSS pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSS pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-ESPOS pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSS pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20Micro%205.1 pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20Micro%205.2 pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20Micro%205.3 pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20Micro%205.4 pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20Micro%205.5 pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP4 pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP5 pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5 pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-LTSS pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSS pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSS pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5 pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP1 pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2 pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3
< 20220509-150400.4.25.1+ 25 more
- (no CPE)range: < 20220509-150400.4.25.1
- (no CPE)range: < 20230724-150500.3.9.1
- (no CPE)range: < 20220509-150400.4.25.1
- (no CPE)range: < 20220509-150400.4.25.1
- (no CPE)range: < 20231128-1.1
- (no CPE)range: < 20250206-1.1
- (no CPE)range: < 20210208-150300.4.19.1
- (no CPE)range: < 20200107-150100.3.40.1
- (no CPE)range: < 20200107-150100.3.40.1
- (no CPE)range: < 20210208-150300.4.19.1
- (no CPE)range: < 20210208-150300.4.19.1
- (no CPE)range: < 20210208-150300.4.19.1
- (no CPE)range: < 20210208-150300.4.19.1
- (no CPE)range: < 20220509-150400.4.25.1
- (no CPE)range: < 20220509-150400.4.25.1
- (no CPE)range: < 20230724-150500.3.9.1
- (no CPE)range: < 20220509-150400.4.25.1
- (no CPE)range: < 20230724-150500.3.9.1
- (no CPE)range: < 20190618-5.34.1
- (no CPE)range: < 20200107-150100.3.40.1
- (no CPE)range: < 20200107-150100.3.40.1
- (no CPE)range: < 20210208-150300.4.19.1
- (no CPE)range: < 20190618-5.34.1
- (no CPE)range: < 20200107-150100.3.40.1
- (no CPE)range: < 20200107-150100.3.40.1
- (no CPE)range: < 20210208-150300.4.19.1
AMD/EPYC Processorscpe-rescue3 versions
various+ 2 more
- (no CPE)range: various
- (no CPE)range: various
- (no CPE)range: various
AMD/AMD EPYC™ Embedded 3000v5
Range: various
AMD/AMD EPYC™ Embedded 7002v5
Range: various
AMD/AMD EPYC™ Embedded 7003v5
Range: various
AMD/AMD Ryzen™ Threadripper™ 2000 Series Processors “Colfax”v5
Range: various

Patches

Vulnerability mechanics

References

www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3002nvdVendor Advisory
www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4002nvdVendor Advisory
www.amd.com/en/corporate/product-security/bulletin/AMD-SB-5001nvd

News mentions

No linked articles in our index yet.

cvss	0.124
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000