CVE-2023-20530

· HIGHModified

← All CVEs

CVSS v3.1

7.5

EPSS

0.62%

Published

Jan 11, 2023

Modified

Apr 7, 2025

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Insufficient input validation of BIOS mailbox messages in SMU may result in out-of-bounds memory reads potentially resulting in a denial of service.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weaknesses (CWE)

CWE-20CWE-20

Affected Products (48)

amd · epyc_7003_firmware (up to milanpi_1.0.0.5)vulnerable

amd · epyc_7003

amd · epyc_72f3_firmware (up to milanpi_1.0.0.5)vulnerable

amd · epyc_72f3

amd · epyc_7313_firmware (up to milanpi_1.0.0.5)vulnerable

amd · epyc_7313

amd · epyc_7313p_firmware (up to milanpi_1.0.0.5)vulnerable

amd · epyc_7313p

amd · epyc_7343_firmware (up to milanpi_1.0.0.5)vulnerable

amd · epyc_7343

amd · epyc_7373x_firmware (up to milanpi_1.0.0.5)vulnerable

amd · epyc_7373x

amd · epyc_73f3_firmware (up to milanpi_1.0.0.5)vulnerable

amd · epyc_73f3

amd · epyc_7413_firmware (up to milanpi_1.0.0.5)vulnerable

amd · epyc_7413

amd · epyc_7443_firmware (up to milanpi_1.0.0.5)vulnerable

amd · epyc_7443

amd · epyc_7443p_firmware (up to milanpi_1.0.0.5)vulnerable

amd · epyc_7443p

amd · epyc_7453_firmware (up to milanpi_1.0.0.5)vulnerable

amd · epyc_7453

amd · epyc_74f3_firmware (up to milanpi_1.0.0.5)vulnerable

amd · epyc_74f3

amd · epyc_7513_firmware (up to milanpi_1.0.0.5)vulnerable

amd · epyc_7513

amd · epyc_7543_firmware (up to milanpi_1.0.0.5)vulnerable

amd · epyc_7543

amd · epyc_7543p_firmware (up to milanpi_1.0.0.5)vulnerable

amd · epyc_7543p

amd · epyc_7573x_firmware (up to milanpi_1.0.0.5)vulnerable

amd · epyc_7573x

amd · epyc_75f3_firmware (up to milanpi_1.0.0.5)vulnerable

amd · epyc_75f3

amd · epyc_7643_firmware (up to milanpi_1.0.0.5)vulnerable

amd · epyc_7643

amd · epyc_7663_firmware (up to milanpi_1.0.0.5)vulnerable

amd · epyc_7663

amd · epyc_7713_firmware (up to milanpi_1.0.0.5)vulnerable

amd · epyc_7713

amd · epyc_7713p_firmware (up to milanpi_1.0.0.5)vulnerable

amd · epyc_7713p

amd · epyc_7743_firmware (up to milanpi_1.0.0.5)vulnerable

amd · epyc_7743

amd · epyc_7763_firmware (up to milanpi_1.0.0.5)vulnerable

amd · epyc_7763

amd · epyc_7773x_firmware (up to milanpi_1.0.0.5)vulnerable

amd · epyc_7773x

References (2)

https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032

Vendor Advisory

https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032

Vendor Advisory

KEV Catalog EPSS Scores Vendors All CVEs