CVE-2023-20578
MEDIUMCVSS 6.4/10EPSS 0.12%
Last modified
CVE-2023-20578 is a medium-severity vulnerability rated 6.4/10 on the CVSS scale. A TOCTOU (Time-Of-Check-Time-Of-Use) in SMM may allow an attacker with ring0 privileges and access to the BIOS menu or UEFI shell to modify the communications buffer potentially resulting in arbitrary code execution.. EPSS estimates a 0.12% chance of exploitation in the next 30 days.
Description
A TOCTOU (Time-Of-Check-Time-Of-Use) in SMM may allow an attacker with ring0 privileges and access to the BIOS menu or UEFI shell to modify the communications buffer potentially resulting in arbitrary code execution.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Amd | Epyc 8024pn Firmware | < genoapi_1.0.0.2 |
| Amd | Epyc 8024p Firmware | < genoapi_1.0.0.2 |
| Amd | Epyc 8124pn Firmware | < genoapi_1.0.0.2 |
| Amd | Epyc 8124p Firmware | < genoapi_1.0.0.2 |
| Amd | Epyc 8224pn Firmware | < genoapi_1.0.0.2 |
| Amd | Epyc 8224p Firmware | < genoapi_1.0.0.2 |
| Amd | Epyc 8324pn Firmware | < genoapi_1.0.0.2 |
| Amd | Epyc 8324p Firmware | < genoapi_1.0.0.2 |
| Amd | Epyc 8434pn Firmware | < genoapi_1.0.0.2 |
| Amd | Epyc 8434p Firmware | < genoapi_1.0.0.2 |
| Amd | Epyc 8534pn Firmware | < genoapi_1.0.0.2 |
| Amd | Epyc 8534p Firmware | < genoapi_1.0.0.2 |
| Amd | Epyc 9734 Firmware | < genoapi_1.0.0.2 |
| Amd | Epyc 9754s Firmware | < genoapi_1.0.0.2 |
| Amd | Epyc 9754 Firmware | < genoapi_1.0.0.2 |
| Amd | Epyc 9184x Firmware | < genoapi_1.0.0.2 |
| Amd | Epyc 9384x Firmware | < genoapi_1.0.0.2 |
| Amd | Epyc 9684x Firmware | < genoapi_1.0.0.2 |
| Amd | Epyc 9124 Firmware | < genoapi_1.0.0.2 |
| Amd | Epyc 9174f Firmware | < genoapi_1.0.0.2 |
| Amd | Epyc 9224 Firmware | < genoapi_1.0.0.2 |
| Amd | Epyc 9254 Firmware | < genoapi_1.0.0.2 |
| Amd | Epyc 9274f Firmware | < genoapi_1.0.0.2 |
| Amd | Epyc 9334 Firmware | < genoapi_1.0.0.2 |
| Amd | Epyc 9354 Firmware | < genoapi_1.0.0.2 |
| Amd | Epyc 9354p Firmware | < genoapi_1.0.0.2 |
| Amd | Epyc 9374f Firmware | < genoapi_1.0.0.2 |
| Amd | Epyc 9454 Firmware | < genoapi_1.0.0.2 |
| Amd | Epyc 9454p Firmware | < genoapi_1.0.0.2 |
| Amd | Epyc 9474f Firmware | < genoapi_1.0.0.2 |
| Amd | Epyc 9534 Firmware | < genoapi_1.0.0.2 |
| Amd | Epyc 9554 Firmware | < genoapi_1.0.0.2 |
| Amd | Epyc 9554p Firmware | < genoapi_1.0.0.2 |
| Amd | Epyc 9634 Firmware | < genoapi_1.0.0.2 |
| Amd | Epyc 9654 Firmware | < genoapi_1.0.0.2 |
| Amd | Epyc 9654p Firmware | < genoapi_1.0.0.2 |
| Amd | Epyc 7203 Firmware | < milanpi_1.0.0.5 |
| Amd | Epyc 7203p Firmware | < milanpi_1.0.0.5 |
| Amd | Epyc 72f3 Firmware | < milanpi_1.0.0.5 |
| Amd | Epyc 7303 Firmware | < milanpi_1.0.0.5 |
| Amd | Epyc 7303p Firmware | < milanpi_1.0.0.5 |
| Amd | Epyc 7313 Firmware | < milanpi_1.0.0.5 |
| Amd | Epyc 7313p Firmware | < milanpi_1.0.0.5 |
| Amd | Epyc 7343 Firmware | < milanpi_1.0.0.5 |
| Amd | Epyc 73f3 Firmware | < milanpi_1.0.0.5 |
| Amd | Epyc 7373x Firmware | < milanpi_1.0.0.5 |
| Amd | Epyc 7413 Firmware | < milanpi_1.0.0.5 |
| Amd | Epyc 7443 Firmware | < milanpi_1.0.0.5 |
| Amd | Epyc 7443p Firmware | < milanpi_1.0.0.5 |
| Amd | Epyc 74f3 Firmware | < milanpi_1.0.0.5 |
Showing 50 of 105 affected configurations. See NVD for the full list.
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2023-20578?
A TOCTOU (Time-Of-Check-Time-Of-Use) in SMM may allow
an attacker with ring0 privileges and access to the
BIOS menu or UEFI shell to modify the communications buffer potentially
resulting in arbitrary code execution.
How severe is CVE-2023-20578?
CVE-2023-20578 has a CVSS score of 6.4/10 (MEDIUM severity). The EPSS model estimates a 0.12% probability of exploitation in the next 30 days.
How do I fix CVE-2023-20578?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2023
- CVE-2023-20571A race condition in System Management Mode (SMM) code may al…8.1
- CVE-2023-20572An observable timing discrepancy in the ASP could allow a pr…5.6
- CVE-2023-20573A privileged attacker can prevent delivery of debug exceptio…3.2
- CVE-2023-20575 A potential power side-channel vulnerability in some AMD pr…6.5
- CVE-2023-20576Insufficient Verification of Data Authenticity in AGESA™ may…7.7
- CVE-2023-20577A heap overflow in SMM module may allow an attacker with acc…7.4
- CVE-2023-20579Improper Access Control in the AMD SPI protection feature ma…6
- CVE-2023-2058A vulnerability was found in EyouCms up to 1.6.2. It has bee…6.1
- CVE-2023-20581Improper access control in the IOMMU may allow a privileged …2.5
- CVE-2023-20582Improper handling of invalid nested page table entries in th…5.3
- CVE-2023-20583A potential power side-channel vulnerability in AMD processo…4.7
- CVE-2023-20584IOMMU improperly handles certain special address ranges with…6
Are you affected by CVE-2023-20578?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST