CVE-2023-20587

Published: Feb 13, 2024

Modified: May 7, 2025

PUBLISHED

Description

Improper Access Control in System Management Mode (SMM) may allow an attacker access to the SPI flash potentially leading to arbitrary code execution.

Vendor	Product	Versions
AMD	3rd Gen AMD EPYC™ Processors	affected `various`
AMD	4th Gen AMD EPYC™ Processors	affected `various`
AMD	1st Gen AMD EPYC™ Processors	affected `various`
AMD	2nd Gen AMD EPYC™ Processors	affected `various`
AMD	AMD EPYC(TM) Embedded 3000	affected `various`
AMD	AMD EPYC(TM) Embedded 7002	affected `various`
AMD	AMD EPYC(TM) Embedded 7003	affected `various`
AMD	AMD EPYC(TM) Embedded 9003	affected `various`

References

https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-7009

vendor-advisory

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2023-20587

Description

Affected Products

References