VYPR
High severity7.5NVD Advisory· Published Aug 13, 2024· Updated Jun 17, 2026

CVE-2023-20578

CVE-2023-20578

Description

A TOCTOU (Time-Of-Check-Time-Of-Use) in SMM may allow an attacker with ring0 privileges and access to the BIOS menu or UEFI shell to modify the communications buffer potentially resulting in arbitrary code execution.

Affected products

121
  • AMD/AMD Ryzen™ 7000 Series Desktop Processorsv5
    Range: ComboAM5 1.0.0.1
  • AMD/AMD Ryzen™ Threadripper™ PRO 5000WX Processorsv5
    Range: ChagallWSPI-sWRX8 1.0.0.7
  • AMD/AMD Ryzen™ 7020 Series Processors with Radeon™ Graphicsv5
    Range: MendocinoPI-FT6 1.0.0.0
  • AMD/AMD Ryzen™ 6000 Series Processors with Radeon™ Graphicsv5
    Range: RembrandtPI-FP7 1.0.0.9b
  • AMD/AMD Ryzen™ 7035 Series Processors with Radeon™ Graphicsv5
    Range: RembrandtPI-FP7 1.0.0.9b
  • AMD/AMD EPYC™ Embedded 3000v5
    Range: SnowyOwl PI 1.1.0.A
  • AMD/AMD EPYC™ Embedded 7002v5
    Range: EmbRomePI-SP3 1.0.0.A
  • AMD/AMD EPYC™ Embedded 7003v5
    Range: EmbMilanPI-SP3 1.0.0.7
  • AMD/AMD EPYC™ Embedded 9003v5
    Range: EmbGenoaPI-SP5 1.0.0.0
  • AMD/AMD Ryzen™ Embedded 7000v5
    Range: EmbeddedAM5PI 1.0.0.0
  • AMD/AMD RyzenTM Embedded V3000v5
    Range: EmbeddedPI-FP7r2 1.0.0.8
  • AMD/SMMllm-create
  • cpe:2.3:o:amd:epyc_8024pn_firmware:*:*:*:*:*:*:*:*
    Range: <genoapi_1.0.0.2
  • cpe:2.3:o:amd:epyc_8024p_firmware:*:*:*:*:*:*:*:*
    Range: <genoapi_1.0.0.2
  • cpe:2.3:o:amd:epyc_8124pn_firmware:*:*:*:*:*:*:*:*
    Range: <genoapi_1.0.0.2
  • cpe:2.3:o:amd:epyc_8124p_firmware:*:*:*:*:*:*:*:*
    Range: <genoapi_1.0.0.2
  • cpe:2.3:o:amd:epyc_8224pn_firmware:*:*:*:*:*:*:*:*
    Range: <genoapi_1.0.0.2
  • cpe:2.3:o:amd:epyc_8224p_firmware:*:*:*:*:*:*:*:*
    Range: <genoapi_1.0.0.2
  • cpe:2.3:o:amd:epyc_8324pn_firmware:*:*:*:*:*:*:*:*
    Range: <genoapi_1.0.0.2
  • cpe:2.3:o:amd:epyc_8324p_firmware:*:*:*:*:*:*:*:*
    Range: <genoapi_1.0.0.2
  • cpe:2.3:o:amd:epyc_8434pn_firmware:*:*:*:*:*:*:*:*
    Range: <genoapi_1.0.0.2
  • cpe:2.3:o:amd:epyc_8434p_firmware:*:*:*:*:*:*:*:*
    Range: <genoapi_1.0.0.2
  • cpe:2.3:o:amd:epyc_8534pn_firmware:*:*:*:*:*:*:*:*
    Range: <genoapi_1.0.0.2
  • cpe:2.3:o:amd:epyc_8534p_firmware:*:*:*:*:*:*:*:*
    Range: <genoapi_1.0.0.2
  • cpe:2.3:o:amd:epyc_9734_firmware:*:*:*:*:*:*:*:*
    Range: <genoapi_1.0.0.2
  • cpe:2.3:o:amd:epyc_9754s_firmware:*:*:*:*:*:*:*:*
    Range: <genoapi_1.0.0.2
  • cpe:2.3:o:amd:epyc_9754_firmware:*:*:*:*:*:*:*:*
    Range: <genoapi_1.0.0.2
  • cpe:2.3:o:amd:epyc_9184x_firmware:*:*:*:*:*:*:*:*
    Range: <genoapi_1.0.0.2
  • cpe:2.3:o:amd:epyc_9384x_firmware:*:*:*:*:*:*:*:*
    Range: <genoapi_1.0.0.2
  • cpe:2.3:o:amd:epyc_9684x_firmware:*:*:*:*:*:*:*:*
    Range: <genoapi_1.0.0.2
  • cpe:2.3:o:amd:epyc_9124_firmware:*:*:*:*:*:*:*:*
    Range: <genoapi_1.0.0.2
  • cpe:2.3:o:amd:epyc_9174f_firmware:*:*:*:*:*:*:*:*
    Range: <genoapi_1.0.0.2
  • cpe:2.3:o:amd:epyc_9224_firmware:*:*:*:*:*:*:*:*
    Range: <genoapi_1.0.0.2
  • cpe:2.3:o:amd:epyc_9254_firmware:*:*:*:*:*:*:*:*
    Range: <genoapi_1.0.0.2
  • cpe:2.3:o:amd:epyc_9274f_firmware:*:*:*:*:*:*:*:*
    Range: <genoapi_1.0.0.2
  • cpe:2.3:o:amd:epyc_9334_firmware:*:*:*:*:*:*:*:*
    Range: <genoapi_1.0.0.2
  • cpe:2.3:o:amd:epyc_9354_firmware:*:*:*:*:*:*:*:*
    Range: <genoapi_1.0.0.2
  • cpe:2.3:o:amd:epyc_9354p_firmware:*:*:*:*:*:*:*:*
    Range: <genoapi_1.0.0.2
  • cpe:2.3:o:amd:epyc_9374f_firmware:*:*:*:*:*:*:*:*
    Range: <genoapi_1.0.0.2
  • cpe:2.3:o:amd:epyc_9454_firmware:*:*:*:*:*:*:*:*
    Range: <genoapi_1.0.0.2
  • cpe:2.3:o:amd:epyc_9454p_firmware:*:*:*:*:*:*:*:*
    Range: <genoapi_1.0.0.2
  • cpe:2.3:o:amd:epyc_9474f_firmware:*:*:*:*:*:*:*:*
    Range: <genoapi_1.0.0.2
  • cpe:2.3:o:amd:epyc_9534_firmware:*:*:*:*:*:*:*:*
    Range: <genoapi_1.0.0.2
  • cpe:2.3:o:amd:epyc_9554_firmware:*:*:*:*:*:*:*:*
    Range: <genoapi_1.0.0.2
  • cpe:2.3:o:amd:epyc_9554p_firmware:*:*:*:*:*:*:*:*
    Range: <genoapi_1.0.0.2
  • cpe:2.3:o:amd:epyc_9634_firmware:*:*:*:*:*:*:*:*
    Range: <genoapi_1.0.0.2
  • cpe:2.3:o:amd:epyc_9654_firmware:*:*:*:*:*:*:*:*
    Range: <genoapi_1.0.0.2
  • cpe:2.3:o:amd:epyc_9654p_firmware:*:*:*:*:*:*:*:*
    Range: <genoapi_1.0.0.2
  • cpe:2.3:o:amd:epyc_7203_firmware:*:*:*:*:*:*:*:*
    Range: <milanpi_1.0.0.5
  • cpe:2.3:o:amd:epyc_7203p_firmware:*:*:*:*:*:*:*:*
    Range: <milanpi_1.0.0.5
  • cpe:2.3:o:amd:epyc_72f3_firmware:*:*:*:*:*:*:*:*
    Range: <milanpi_1.0.0.5
  • cpe:2.3:o:amd:epyc_7303_firmware:*:*:*:*:*:*:*:*
    Range: <milanpi_1.0.0.5
  • cpe:2.3:o:amd:epyc_7303p_firmware:*:*:*:*:*:*:*:*
    Range: <milanpi_1.0.0.5
  • cpe:2.3:o:amd:epyc_7313_firmware:*:*:*:*:*:*:*:*
    Range: <milanpi_1.0.0.5
  • cpe:2.3:o:amd:epyc_7313p_firmware:*:*:*:*:*:*:*:*
    Range: <milanpi_1.0.0.5
  • cpe:2.3:o:amd:epyc_7343_firmware:*:*:*:*:*:*:*:*
    Range: <milanpi_1.0.0.5
  • cpe:2.3:o:amd:epyc_73f3_firmware:*:*:*:*:*:*:*:*
    Range: <milanpi_1.0.0.5
  • cpe:2.3:o:amd:epyc_7373x_firmware:*:*:*:*:*:*:*:*
    Range: <milanpi_1.0.0.5
  • cpe:2.3:o:amd:epyc_7413_firmware:*:*:*:*:*:*:*:*
    Range: <milanpi_1.0.0.5
  • cpe:2.3:o:amd:epyc_7443_firmware:*:*:*:*:*:*:*:*
    Range: <milanpi_1.0.0.5
  • cpe:2.3:o:amd:epyc_7443p_firmware:*:*:*:*:*:*:*:*
    Range: <milanpi_1.0.0.5
  • cpe:2.3:o:amd:epyc_74f3_firmware:*:*:*:*:*:*:*:*
    Range: <milanpi_1.0.0.5
  • cpe:2.3:o:amd:epyc_7453_firmware:*:*:*:*:*:*:*:*
    Range: <milanpi_1.0.0.5
  • cpe:2.3:o:amd:epyc_7473x_firmware:*:*:*:*:*:*:*:*
    Range: <milanpi_1.0.0.5
  • cpe:2.3:o:amd:epyc_7513_firmware:*:*:*:*:*:*:*:*
    Range: <milanpi_1.0.0.5
  • cpe:2.3:o:amd:epyc_7543_firmware:*:*:*:*:*:*:*:*
    Range: <milanpi_1.0.0.5
  • cpe:2.3:o:amd:epyc_7543p_firmware:*:*:*:*:*:*:*:*
    Range: <milanpi_1.0.0.5
  • cpe:2.3:o:amd:epyc_75f3_firmware:*:*:*:*:*:*:*:*
    Range: <milanpi_1.0.0.5
  • cpe:2.3:o:amd:epyc_7573x_firmware:*:*:*:*:*:*:*:*
    Range: <milanpi_1.0.0.5
  • cpe:2.3:o:amd:epyc_7643_firmware:*:*:*:*:*:*:*:*
    Range: <milanpi_1.0.0.5
  • cpe:2.3:o:amd:epyc_7773x_firmware:*:*:*:*:*:*:*:*
    Range: <milanpi_1.0.0.5
  • cpe:2.3:o:amd:epyc_7643p_firmware:*:*:*:*:*:*:*:*
    Range: <milanpi_1.0.0.5
  • cpe:2.3:o:amd:epyc_7663_firmware:*:*:*:*:*:*:*:*
    Range: <milanpi_1.0.0.5
  • cpe:2.3:o:amd:epyc_7663p_firmware:*:*:*:*:*:*:*:*
    Range: <milanpi_1.0.0.5
  • cpe:2.3:o:amd:epyc_7713_firmware:*:*:*:*:*:*:*:*
    Range: <milanpi_1.0.0.5
  • cpe:2.3:o:amd:epyc_7713p_firmware:*:*:*:*:*:*:*:*
    Range: <milanpi_1.0.0.5
  • cpe:2.3:o:amd:epyc_7763_firmware:*:*:*:*:*:*:*:*
    Range: <milanpi_1.0.0.5
  • cpe:2.3:o:amd:epyc_7h12_firmware:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:amd:epyc_7h12_firmware:*:*:*:*:*:*:*:*range: <romepi_1.0.0.g
    • cpe:2.3:o:amd:epyc_7f32_firmware:*:*:*:*:*:*:*:*range: <romepi_1.0.0.g
    • cpe:2.3:o:amd:epyc_7532_firmware:*:*:*:*:*:*:*:*range: <romepi_1.0.0.g
  • cpe:2.3:o:amd:epyc_7f72_firmware:*:*:*:*:*:*:*:*
    Range: <romepi_1.0.0.g
  • cpe:2.3:o:amd:epyc_7f52_firmware:*:*:*:*:*:*:*:*
    Range: <romepi_1.0.0.g
  • cpe:2.3:o:amd:epyc_7742_firmware:*:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:o:amd:epyc_7742_firmware:*:*:*:*:*:*:*:*range: <romepi_1.0.0.g
    • cpe:2.3:o:amd:epyc_7702p_firmware:*:*:*:*:*:*:*:*range: <romepi_1.0.0.g
    • cpe:2.3:o:amd:epyc_7402p_firmware:*:*:*:*:*:*:*:*range: <romepi_1.0.0.g
    • cpe:2.3:o:amd:epyc_7272_firmware:*:*:*:*:*:*:*:*range: <romepi_1.0.0.g
  • cpe:2.3:o:amd:epyc_7702_firmware:*:*:*:*:*:*:*:*
    Range: <romepi_1.0.0.g
  • cpe:2.3:o:amd:epyc_7662_firmware:*:*:*:*:*:*:*:*
    Range: <romepi_1.0.0.g
  • cpe:2.3:o:amd:epyc_7642_firmware:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:amd:epyc_7642_firmware:*:*:*:*:*:*:*:*range: <romepi_1.0.0.g
    • cpe:2.3:o:amd:epyc_7552_firmware:*:*:*:*:*:*:*:*range: <romepi_1.0.0.g
    • cpe:2.3:o:amd:epyc_7232p_firmware:*:*:*:*:*:*:*:*range: <romepi_1.0.0.g
  • cpe:2.3:o:amd:epyc_7542_firmware:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:amd:epyc_7542_firmware:*:*:*:*:*:*:*:*range: <romepi_1.0.0.g
    • cpe:2.3:o:amd:epyc_7282_firmware:*:*:*:*:*:*:*:*range: <romepi_1.0.0.g
  • cpe:2.3:o:amd:epyc_7502p_firmware:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:amd:epyc_7502p_firmware:*:*:*:*:*:*:*:*range: <romepi_1.0.0.g
    • cpe:2.3:o:amd:epyc_7302_firmware:*:*:*:*:*:*:*:*range: <romepi_1.0.0.g
  • cpe:2.3:o:amd:epyc_7502_firmware:*:*:*:*:*:*:*:*
    Range: <romepi_1.0.0.g
  • cpe:2.3:o:amd:epyc_7452_firmware:*:*:*:*:*:*:*:*
    Range: <romepi_1.0.0.g
  • cpe:2.3:o:amd:epyc_7402_firmware:*:*:*:*:*:*:*:*
    Range: <romepi_1.0.0.g
  • cpe:2.3:o:amd:epyc_7352_firmware:*:*:*:*:*:*:*:*
    Range: <romepi_1.0.0.g
  • cpe:2.3:o:amd:epyc_7302p_firmware:*:*:*:*:*:*:*:*
    Range: <romepi_1.0.0.g
  • cpe:2.3:o:amd:epyc_7262_firmware:*:*:*:*:*:*:*:*
    Range: <romepi_1.0.0.g
  • cpe:2.3:o:amd:epyc_7252_firmware:*:*:*:*:*:*:*:*
    Range: <romepi_1.0.0.g
  • cpe:2.3:o:amd:epyc_7601_firmware:*:*:*:*:*:*:*:*
    Range: <naplespi_1.0.0.k
  • cpe:2.3:o:amd:epyc_7551p_firmware:*:*:*:*:*:*:*:*
    Range: <naplespi_1.0.0.k
  • cpe:2.3:o:amd:epyc_7551_firmware:*:*:*:*:*:*:*:*
    Range: <naplespi_1.0.0.k
  • cpe:2.3:o:amd:epyc_7501_firmware:*:*:*:*:*:*:*:*
    Range: <naplespi_1.0.0.k
  • cpe:2.3:o:amd:epyc_7451_firmware:*:*:*:*:*:*:*:*
    Range: <naplespi_1.0.0.k
  • cpe:2.3:o:amd:epyc_7401p_firmware:*:*:*:*:*:*:*:*
    Range: <naplespi_1.0.0.k
  • cpe:2.3:o:amd:epyc_7401_firmware:*:*:*:*:*:*:*:*
    Range: <naplespi_1.0.0.k
  • cpe:2.3:o:amd:epyc_7371_firmware:*:*:*:*:*:*:*:*
    Range: <naplespi_1.0.0.k
  • cpe:2.3:o:amd:epyc_7351p_firmware:*:*:*:*:*:*:*:*
    Range: <naplespi_1.0.0.k
  • cpe:2.3:o:amd:epyc_7351_firmware:*:*:*:*:*:*:*:*
    Range: <naplespi_1.0.0.k
  • cpe:2.3:o:amd:epyc_7301_firmware:*:*:*:*:*:*:*:*
    Range: <naplespi_1.0.0.k
  • cpe:2.3:o:amd:epyc_7281_firmware:*:*:*:*:*:*:*:*
    Range: <naplespi_1.0.0.k
  • cpe:2.3:o:amd:epyc_7261_firmware:*:*:*:*:*:*:*:*
    Range: <naplespi_1.0.0.k
  • cpe:2.3:o:amd:epyc_7251_firmware:*:*:*:*:*:*:*:*
    Range: <naplespi_1.0.0.k
  • cpe:2.3:o:amd:epyc_7001_firmware:*:*:*:*:*:*:*:*
    Range: <naplespi_1.0.0.k
  • AMD/AMD processorscpe-rescue4 versions
    NaplesPI 1.0.0.K+ 3 more
    • (no CPE)range: NaplesPI 1.0.0.K
    • (no CPE)range: RomePI 1.0.0.G
    • (no CPE)range: MilanPI 1.0.0.B
    • (no CPE)range: GenoaPI 1.0.0.2

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.