← Database

CVE-2023-20520

CRITICAL CVSS: 9.8 Published: 2023-05-09 Modified: 2026-06-17

Description

Improper access control settings in ASP Bootloader may allow an attacker to corrupt the return address causing a stack-based buffer overrun potentially leading to arbitrary code execution.

Affected Platforms

Amd Epyc 7551PAmd Epyc 7642Amd Epyc 7401 FirmwareAmd Epyc 74F3Amd Epyc 7502PAmd Epyc 7313 FirmwareAmd Epyc 7302PAmd Epyc 7702PAmd Epyc 7F52Amd Epyc 7473X Firmware

Weakness Type

CWE-787, CWE-787

References