PT-2023-1474 · Amd · Amd Bootloader

Published 2023-01-10 · Updated 2025-04-07 · CVE-2023-20527

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions ASP Bootloader (affected versions not specified) AMD Bootloader (affected versions not specified)

Description The issue is related to improper input validation in the bootloader, which may allow a privileged attacker to read memory out-of-bounds. This could potentially lead to a denial-of-service. The vulnerability exists due to insufficient input validation, and its exploitation may enable a remote attacker to cause a denial-of-service.

Recommendations For ASP Bootloader, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For AMD Bootloader, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2023-00883

CVE-2023-20527

Affected Products

Amd Bootloader

References · 6

• https://bdu.fstec.ru/vul/2023-00883 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-20527 · Security Note
• https://amd.com/en/corporate/product-security/bulletin/AMD-SB-1032 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-20527 · Vendor Advisory
• https://support.lenovo.com/us/en/productsecurity/LEN-87730 · Note
• https://t.me/cvenotify/118036 · Telegram Post