CVE-2023-20521
MEDIUMCVSS 5.7/10EPSS 0.26%
Last modified
CVE-2023-20521 is a medium-severity vulnerability rated 5.7/10 on the CVSS scale. TOCTOU in the ASP Bootloader may allow an attacker with physical access to tamper with SPI ROM records after memory content verification, potentially leading to loss of confidentiality or a denial of service.. EPSS estimates a 0.26% chance of exploitation in the next 30 days.
Description
TOCTOU in the ASP Bootloader may allow an attacker with physical access to tamper with SPI ROM records after memory content verification, potentially leading to loss of confidentiality or a denial of service.
Metrics
CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Amd | Epyc 7001 Firmware | < naplespi_1.0.0.h |
| Amd | Epyc 7251 Firmware | < naplespi_1.0.0.h |
| Amd | Epyc 7261 Firmware | < naplespi_1.0.0.h |
| Amd | Epyc 7281 Firmware | < naplespi_1.0.0.h |
| Amd | Epyc 7301 Firmware | < naplespi_1.0.0.h |
| Amd | Epyc 7351 Firmware | < naplespi_1.0.0.h |
| Amd | Epyc 7351p Firmware | < naplespi_1.0.0.h |
| Amd | Epyc 7371 Firmware | < naplespi_1.0.0.h |
| Amd | Epyc 7401 Firmware | < naplespi_1.0.0.h |
| Amd | Epyc 7401p Firmware | < naplespi_1.0.0.h |
| Amd | Epyc 7451 Firmware | < naplespi_1.0.0.h |
| Amd | Epyc 7501 Firmware | < naplespi_1.0.0.h |
| Amd | Epyc 7551 Firmware | < naplespi_1.0.0.h |
| Amd | Epyc 7551p Firmware | < naplespi_1.0.0.h |
| Amd | Epyc 7601 Firmware | < naplespi_1.0.0.h |
| Amd | Epyc 7232p Firmware | < romepi_1.0.0.d |
| Amd | Epyc 7252 Firmware | < romepi_1.0.0.d |
| Amd | Epyc 7262 Firmware | < romepi_1.0.0.d |
| Amd | Epyc 7272 Firmware | < romepi_1.0.0.d |
| Amd | Epyc 7282 Firmware | < romepi_1.0.0.d |
| Amd | Epyc 7302 Firmware | < romepi_1.0.0.d |
| Amd | Epyc 7302p Firmware | < romepi_1.0.0.d |
| Amd | Epyc 7352 Firmware | < romepi_1.0.0.d |
| Amd | Epyc 7402 Firmware | < romepi_1.0.0.d |
| Amd | Epyc 7402p Firmware | < romepi_1.0.0.d |
| Amd | Epyc 7452 Firmware | < romepi_1.0.0.d |
| Amd | Epyc 7502 Firmware | < romepi_1.0.0.d |
| Amd | Epyc 7502p Firmware | < romepi_1.0.0.d |
| Amd | Epyc 7532 Firmware | < romepi_1.0.0.d |
| Amd | Epyc 7542 Firmware | < romepi_1.0.0.d |
| Amd | Epyc 7552 Firmware | < romepi_1.0.0.d |
| Amd | Epyc 7642 Firmware | < romepi_1.0.0.d |
| Amd | Epyc 7662 Firmware | < romepi_1.0.0.d |
| Amd | Epyc 7702 Firmware | < romepi_1.0.0.d |
| Amd | Epyc 7702p Firmware | < romepi_1.0.0.d |
| Amd | Epyc 7742 Firmware | < romepi_1.0.0.d |
| Amd | Epyc 7f32 Firmware | < romepi_1.0.0.d |
| Amd | Epyc 7f52 Firmware | < romepi_1.0.0.d |
| Amd | Epyc 7f72 Firmware | < romepi_1.0.0.d |
| Amd | Epyc 7h12 Firmware | < romepi_1.0.0.d |
| Amd | Epyc 7763 Firmware | < milanpi_1.0.0.7 |
| Amd | Epyc 7713p Firmware | < milanpi_1.0.0.7 |
| Amd | Epyc 7713 Firmware | < milanpi_1.0.0.7 |
| Amd | Epyc 7663p Firmware | < milanpi_1.0.0.7 |
| Amd | Epyc 7663 Firmware | < milanpi_1.0.0.7 |
| Amd | Epyc 7643p Firmware | < milanpi_1.0.0.7 |
| Amd | Epyc 7773x Firmware | < milanpi_1.0.0.7 |
| Amd | Epyc 7643 Firmware | < milanpi_1.0.0.7 |
| Amd | Epyc 7573x Firmware | < milanpi_1.0.0.7 |
| Amd | Epyc 75f3 Firmware | < milanpi_1.0.0.7 |
Showing 50 of 93 affected configurations. See NVD for the full list.
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2023-20521?
TOCTOU in the ASP Bootloader may allow an attacker with physical access to tamper with SPI ROM records after memory content verification, potentially leading to loss of confidentiality or a denial of service.
How severe is CVE-2023-20521?
CVE-2023-20521 has a CVSS score of 5.7/10 (MEDIUM severity). The EPSS model estimates a 0.26% probability of exploitation in the next 30 days.
How do I fix CVE-2023-20521?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2023
- CVE-2023-20515Improper access control in the fTPM driver in the trusted OS…5.7
- CVE-2023-20516Improper handling of insufficiency privileges in the ASP cou…3.3
- CVE-2023-20518Incomplete cleanup in the ASP may expose the Master Encrypti…1.9
- CVE-2023-20519A Use-After-Free vulnerability in the management of an SNP g…3.3
- CVE-2023-2052A vulnerability classified as critical was found in Campcode…8.8
- CVE-2023-20520Improper access control settings in ASP Bootloader may allow…9.8
- CVE-2023-20522Insufficient input validation in ASP may allow an attacker w…7.5
- CVE-2023-20523TOCTOU in the ASP may allow a physical attacker to write bey…5.7
- CVE-2023-20524An attacker with a compromised ASP could possibly send malfo…7.5
- CVE-2023-20525Insufficient syscall input validation in the ASP Bootloader …6.5
- CVE-2023-20526Insufficient input validation in the ASP Bootloader may enab…4.6
- CVE-2023-20527Improper syscall input validation in the ASP Bootloader may …6.5
Are you affected by CVE-2023-20521?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST