CVE-2023-20521

5.7 mediumEPSS 0.3%

Medium (5.7) in amd. EPSS 0.3% chance of exploitation in the next 30 days.

TOCTOU in the ASP Bootloader may allow an attacker with physical access to tamper with SPI ROM records after memory content verification, potentially leading to loss of confidentiality or a denial of service.

Severity

CVSS 3.1

5.7 medium

CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 18% of CVEs (scores of 2026-10-31)
CWE: CWE-367
Published: 2023-11-14
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

amd:amd_3015ce_firmware
amd:amd_3015e_firmware
amd:athlon_gold_3150g_firmware
amd:athlon_gold_pro_3150g_firmware
amd:athlon_gold_pro_3150ge_firmware
amd:athlon_pro_300ge_firmware
amd:epyc_7001_firmware
amd:epyc_7203_firmware
amd:epyc_7203p_firmware
amd:epyc_7232p_firmware
amd:epyc_7251_firmware
amd:epyc_7252_firmware
amd:epyc_7261_firmware
amd:epyc_7262_firmware
amd:epyc_7272_firmware
amd:epyc_7281_firmware
amd:epyc_7282_firmware
amd:epyc_72f3_firmware
amd:epyc_7301_firmware
amd:epyc_7302_firmware
amd:epyc_7302p_firmware
amd:epyc_7303_firmware
amd:epyc_7303p_firmware
amd:epyc_7313_firmware
amd:epyc_7313p_firmware
amd:epyc_7343_firmware
amd:epyc_7351_firmware
amd:epyc_7351p_firmware
amd:epyc_7352_firmware
amd:epyc_7371_firmware
amd:epyc_7373x_firmware
amd:epyc_73f3_firmware
amd:epyc_7401_firmware
amd:epyc_7401p_firmware
amd:epyc_7402_firmware
amd:epyc_7402p_firmware
amd:epyc_7413_firmware
amd:epyc_7443_firmware
amd:epyc_7443p_firmware
amd:epyc_7451_firmware
amd:epyc_7452_firmware
amd:epyc_7453_firmware
amd:epyc_7473x_firmware
amd:epyc_74f3_firmware
amd:epyc_7501_firmware
amd:epyc_7502_firmware
amd:epyc_7502p_firmware
amd:epyc_7513_firmware
amd:epyc_7532_firmware
amd:epyc_7542_firmware

References

Check your stack JSON