CVE-2023-20587

No fix known EPSS <1%CVSS 7.1

Improper Access Control in System Management Mode (SMM) may allow an attacker access to the SPI flash potentially leading to arbitrary code execution.

Published 2024-02-13 · CVE record · OSV

Products: 3rd Gen AMD EPYC™ Processors, 4th Gen AMD EPYC™ Processors, 1st Gen AMD EPYC™ Processors, 2nd Gen AMD EPYC™ Processors, AMD EPYC(TM) Embedded 3000, AMD EPYC (TM) Embedded 7002, AMD EPYC(TM) Embedded 7003, AMD EPYC(TM) Embedded 9003