CVE-2023-20587 — AMD / 3rd Gen AMD EPYC™ Processors

Description (CNA)

Improper Access Control in System Management Mode (SMM) may allow an attacker access to the SPI flash potentially leading to arbitrary code execution.

Affected (CNA)

Vendor / product	Versions
AMD / 3rd Gen AMD EPYC™ Processors	affected various
AMD / 4th Gen AMD EPYC™ Processors	affected various
AMD / 1st Gen AMD EPYC™ Processors	affected various
AMD / 2nd Gen AMD EPYC™ Processors	affected various
AMD / AMD EPYC(TM) Embedded 3000	affected various
AMD / AMD EPYC(TM) Embedded 7002	affected various
AMD / AMD EPYC(TM) Embedded 7003	affected various
AMD / AMD EPYC(TM) Embedded 9003	affected various

CWE

No CWE identifiers supplied.

References

https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-7009

ADP enrichment

CVE

No English description supplied.

https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-7009

CISA-ADP

No English description supplied.

No references supplied.