PT-2023-17451 · Unknown+1 · Asp Bootloader+1

Publicado 2023-11-14 · Atualizado 2025-02-12 · CVE-2023-20526

Positive Technologies (AI Summary)

CVSS v3.1

4.6

Média

Vetor base

AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions ASP Bootloader (affected versions not specified)

Description The issue is related to insufficient input validation in the ASP Bootloader, which may allow a privileged attacker with physical access to expose the contents of ASP memory. This could potentially lead to a loss of confidentiality.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2023-20526

OPENSUSE-SU-2024:13475-1

OPENSUSE-SU-2025:14772-1

SUSE-SU-2023:4654-1

SUSE-SU-2023:4655-1

SUSE-SU-2023:4660-1

SUSE-SU-2023:4664-1

SUSE-SU-2023:4665-1

SUSE-SU-2024:2376-1

Produtos afetados

Asp Bootloader

Suse

Referências · 46

• https://suse.com/security/cve/CVE-2021-46744 · Nota
• https://bugzilla.suse.com/1215831 · Nota
• https://suse.com/support/update/announcement/2024/suse-su-20242376-1 · Nota
• https://osv.dev/vulnerability/openSUSE-SU-2024:13475-1 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2021-26348 · Nota
• https://t.me/cvenotify/71325 · Publicação no Telegram
• https://amd.com/en/corporate/product-security/bulletin/AMD-SB-5001 · Aviso do Fabricante
• https://amd.com/en/corporate/product-security/bulletin/AMD-SB-4002 · Aviso do Fabricante
• https://osv.dev/vulnerability/SUSE-SU-2023:4654-1 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2021-26375 · Nota
• https://suse.com/security/cve/CVE-2023-20592 · Nota
• https://suse.com/security/cve/CVE-2021-26339 · Nota
• https://suse.com/support/update/announcement/2023/suse-su-20234665-1 · Nota
• https://suse.com/security/cve/CVE-2023-20533 · Nota
• https://suse.com/security/cve/CVE-2023-20521 · Nota