← Database
CVE-2023-20578
HIGH
CVSS: 7.5
Published: 2024-08-13
Modified: 2026-06-17
Description
A TOCTOU (Time-Of-Check-Time-Of-Use) in SMM may allow
an attacker with ring0 privileges and access to the
BIOS menu or UEFI shell to modify the communications buffer potentially
resulting in arbitrary code execution.
Affected Platforms
Amd Epyc 7551PAmd Epyc 7642Amd Epyc 9754Amd Epyc 7401 FirmwareAmd Epyc 74F3Amd Epyc 7502PAmd Epyc 9474FAmd Epyc 9634Amd Epyc 7303 FirmwareAmd Epyc 7303P Firmware
Weakness Type
CWE-367, CWE-367