Advisoriesby IbisAMDCVE-2023-20576
AMD AGESA: denial of service
No fix yet
Insufficient Verification of Data Authenticity in AGESA™ may allow an attacker to update SPI ROM data potentially resulting in denial of service or privilege escalation.
Affected versions
The source does not list versions here. See the source advisory for affected products and fixes.
Details and references
- CVSS 3.1
- CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
- Severity from
- the vendor (its own CVE record or advisory)
- Weakness
- CWE-345